43f1f8b556c5bc2378033d3890afcf9d_JaffaCakes118 | Triage

Sharing

General

Target

43f1f8b556c5bc2378033d3890afcf9d_JaffaCakes118
Size

152KB
MD5

43f1f8b556c5bc2378033d3890afcf9d
SHA1

b863b4b75eb6b705b368dad95364b5060ff4dfcb
SHA256

1d4e8c2588fb7b8d8ea3488fb4d1fa9e92a7fdcec8b4e84d66a1dde3dcddedbc
SHA512

8abe209b28c099fc4bd623f42550cab729ab36bcc90f6249cc88e2a8e5b6eab6deffa36e83cad7ffc438d544f08d8bb69568d1e972b25c1c1c9d6d14bc50f5a0
SSDEEP

3072:IcKalk9e1+WNNwD0RSDvbmkvl/sssZoZh1gkWadfrOBY+gcvx27moPCyl:IU0vasc+hKkWaKggWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43f1f8b556c5bc2378033d3890afcf9d_JaffaCakes118

Files

43f1f8b556c5bc2378033d3890afcf9d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ