38faa2481406f81c147f892e84712d85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38faa2481406f81c147f892e84712d85_JaffaCakes118
Size

5KB
MD5

38faa2481406f81c147f892e84712d85
SHA1

20b40c8c66960c931dec52a12032a3712be6ecb8
SHA256

d28e31937ffbfc289c5cb84380b0303eb9d0e19ee65891e3ede1ce04e0cd4e7e
SHA512

643728980a4673e460d7b8d9e1921f19d9df61903e7958a4f5b6950966f9fb72b3da5e272a8fb3e5a185d8e8f97245a21853460df42bb7114762934afdf7f78e
SSDEEP

48:6XiXTO7X7fv3HI3AtFf99xpoThRNCJl09Izu9aWa1NNuRI+OsaulzCnq:NWLX3S2FFpIhRUzKaWa1NOrRC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38faa2481406f81c147f892e84712d85_JaffaCakes118

Files

38faa2481406f81c147f892e84712d85_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ