7390c3fd183271fdf8e4c82d88208490_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7390c3fd183271fdf8e4c82d88208490_JaffaCakes118
Size

252KB
MD5

7390c3fd183271fdf8e4c82d88208490
SHA1

054634f052a739355bf1aec07c9665c0bef5a391
SHA256

561adb646629d36f5d6f6c94a793a34e569adcbe4c69524279f033aff8739bcf
SHA512

39418b67931a606cfbd82bb971a886fd7bc0267915d5685ad963428443e541cc1e51f5a35b17fc34f99b8500fb2cdeaff89945690910b3f9bd700c95c43b6d91
SSDEEP

6144:cqcrwYN5DKdNEwryDIoD4zRAxx3phVyJ:uMYj07oD4zSxlVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7390c3fd183271fdf8e4c82d88208490_JaffaCakes118

Files

7390c3fd183271fdf8e4c82d88208490_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ