4b317b629dff1002edc07da2a9bd3495_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b317b629dff1002edc07da2a9bd3495_JaffaCakes118
Size

257KB
MD5

4b317b629dff1002edc07da2a9bd3495
SHA1

8cd39239e9a8c7fe6f137523d2e9e0cdefcff3fc
SHA256

08b76448432d629847c4a5518af515501a5936d22313dbc5f8327df57177dbb0
SHA512

d37943bb639f4b887f4427d0245a1ec6d492b804b29e292853531b975b699ee1f6510c3472b267afb14a3e935318ef77c8d1d256a28b3fb3ffd3580ea7260f50
SSDEEP

3072:BLa0nyuOOskuGuK0K0dN2piyq46tDc2i8NtdKQMwcM70ss3RBLT5qlt5gL1o041S:TOpkn0dyq9nNtdwGsH5Q5gkUv0ajP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b317b629dff1002edc07da2a9bd3495_JaffaCakes118

Files

4b317b629dff1002edc07da2a9bd3495_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

CIBd_RelwnApi
GdstemSeotungs_Dttib
cis_Powercmpit
wlsi_IB_Logiprov

Sections

.text
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ