39da5edc0ac4e49cebb81c9175f045f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39da5edc0ac4e49cebb81c9175f045f7_JaffaCakes118
Size

28KB
MD5

39da5edc0ac4e49cebb81c9175f045f7
SHA1

082a5722da11dd157cd153462bd4024adf4175e8
SHA256

6cfa84d0c5f6b4b8da3f321503efc83d970eb530770d5073d1c515b7069a2167
SHA512

cc1155d3276173d210d15907b3c7536e0da9c2c45c1412e15a0c1815ec93112d0f2e0137499d0ce2cf8b0ebb9466c9c3ba89ecf987f03a8a8d33ea4403fca579
SSDEEP

384:UjpYnLzMHr3mElOSDsPBIE4eroBLRW2hrLzwaQNvVHYV:U2LzMHaRJ5IE92hrLHsVHY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39da5edc0ac4e49cebb81c9175f045f7_JaffaCakes118

Files

39da5edc0ac4e49cebb81c9175f045f7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ