7398d497091a214deb7a8d84fcc2866a_JaffaCakes118 | Triage

Sharing

General

Target

7398d497091a214deb7a8d84fcc2866a_JaffaCakes118
Size

112KB
MD5

7398d497091a214deb7a8d84fcc2866a
SHA1

62870b7e20301fd9d25bf9fb49e7b2ebfa394923
SHA256

a414490e02c86accca557898deec9929122f81a82e27baa68e562f59c2eaa7a2
SHA512

95b840a07e673a68d125679e3bbc330830c39d2c28e995360cc4f740c5aec4830c992e6ab7beafb88a9be761e8d7b1baf57ddd6c44946491fb9843ac4978d89d
SSDEEP

1536:oC4BvmdIdUwMKOeQiTxl34NUpXvJS6q6205Km:oRBvmCUwMOQynfXvJni+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7398d497091a214deb7a8d84fcc2866a_JaffaCakes118

Files

7398d497091a214deb7a8d84fcc2866a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ