490305a2d5481202f28f8737d0491860_JaffaCakes118 | Triage

Sharing

General

Target

490305a2d5481202f28f8737d0491860_JaffaCakes118
Size

9KB
MD5

490305a2d5481202f28f8737d0491860
SHA1

5e7bd6e2b7010906fb9c3101ea1cec53fad9124f
SHA256

0440f3f505df9e5aec7639f7f15ebcf5b06c2db8b28227924d616358d141f134
SHA512

35f16083e2744cf2fe15d0dadc2c3688df893120def839d198fd4a1c160539704f6891ff8f412a495b191434feccd644230f8cbd9dc5668fe22ed280232fe6d1
SSDEEP

192:jMULw4IiOFOGOrKweWwta9NKHDD+qDpa:jjLwiUHtaoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490305a2d5481202f28f8737d0491860_JaffaCakes118

Files

490305a2d5481202f28f8737d0491860_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ