36468c0f234d55680fbf527f967a78e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36468c0f234d55680fbf527f967a78e7_JaffaCakes118
Size

10KB
MD5

36468c0f234d55680fbf527f967a78e7
SHA1

d2c30fe958019fffe3dc81aa07bfc6e226a7e1e5
SHA256

3e3998f52942afd14410f07d05b09ce9e5e1fcfe495d3817d382bcdb20af66bc
SHA512

d5c4cac2bc0fdbc05a51d048f55ec9695049e68a435e4ad6608e2a6b2799bdd78ed097ded4737f172a3a89a19a240372523a7fdee571f221e22599a6f4f9f07d
SSDEEP

192:Se94SuZlYOnnROtq31tld8i3LSpn6TcxbG3G1MhA04Tsl:SM4Otq31n6gLSpn6TcxbuA04Yl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36468c0f234d55680fbf527f967a78e7_JaffaCakes118

Files

36468c0f234d55680fbf527f967a78e7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ