3b6386e7860f496f9b8d47a8e5473940_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6386e7860f496f9b8d47a8e5473940_JaffaCakes118
Size

88KB
MD5

3b6386e7860f496f9b8d47a8e5473940
SHA1

6aee4a1798342a8b420384c209c3c30f4cdcb9d3
SHA256

62229e1254f8c12c06f6346f82cec18ac0a647d4520746526158d012d9471efa
SHA512

e69ec8fcd2a972d0c109899bc064e2a7dcd239f2ab136e753dcdec217d88eb570343a749e8ab688e801f0bcff387cda78fad57e915d2f7c160ffa95d9812ea8b
SSDEEP

1536:AviwFIOf/HsOR+r612JBjGPg6sx9bWnWR1KwdWWbLg5:AvRr/H/R2k2/jGY7x9bWnWR1KwdWWbLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6386e7860f496f9b8d47a8e5473940_JaffaCakes118

Files

3b6386e7860f496f9b8d47a8e5473940_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Acer\AppData\Local\Temp\irao6xxd.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ