5b69696bdda21da284f1857c4a29420c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b69696bdda21da284f1857c4a29420c_JaffaCakes118
Size

136KB
MD5

5b69696bdda21da284f1857c4a29420c
SHA1

1ec53442e04bb9cc48e2dc3f18535047f5954c31
SHA256

909061d87ba3fb5e2ebe8b17b27a3d72db80890b82cab90c41f5e35b5e91fd6b
SHA512

ff27ef3a42f182908700e476bbb31b51ec956b297eefbcb8e905d81ef18c027e5959fb6d4c503f003706fe7571cb58f695b14ff0175b3b00b81b4436ed14868e
SSDEEP

3072:W3iJQBl8rXd4q+TNEXRV3T4VBGVBGVBGVBOSE:YieBurXdDhZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b69696bdda21da284f1857c4a29420c_JaffaCakes118

Files

5b69696bdda21da284f1857c4a29420c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ