380bb60f9c54dd9f84ad0de07186c174_JaffaCakes118 | Triage

Sharing

General

Target

380bb60f9c54dd9f84ad0de07186c174_JaffaCakes118
Size

152KB
MD5

380bb60f9c54dd9f84ad0de07186c174
SHA1

69c18516c2a0ee7687b0d58c91d4d228e802d39a
SHA256

ab08286d21e59103ac63136b5a534a0d4087aea6e86e7cf4f1b472e0aabfdcec
SHA512

9f7ce79ee6d1d3915ca2d00020f007660b8a34c65819d9fdd7e1fc6a42f48d018145b5cf3211d38a95c99d1ae12b58da9541325d885579f8156098067b428a44
SSDEEP

1536:S4rqv5N3nl2A2EP8VMTs5Yxdbonmx5ysayj/KEJg4ivTza:/qv5N3nl2A2tVkR5yXyb3m4irm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380bb60f9c54dd9f84ad0de07186c174_JaffaCakes118

Files

380bb60f9c54dd9f84ad0de07186c174_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ