81c8e517af50b3da720f5229a68f62d9_JaffaCakes118 | Triage

Sharing

General

Target

81c8e517af50b3da720f5229a68f62d9_JaffaCakes118
Size

27KB
MD5

81c8e517af50b3da720f5229a68f62d9
SHA1

4434b79d746cc6dcaeaa204fe57c98b6bb698337
SHA256

1b46591bb955a5e8dad0ad7a5e877798aa0ad6eb5d4edf52fc64896507b32800
SHA512

dec87e72b2d7671bcf8c6ed5a533b4b64762c307716814b345cfb56f82ac1b0106af70f11bf080eeb49eac0da5eda377c7e3a7b6ae2a7c717940b761de84e45a
SSDEEP

384:M30XKTba2Z+HWS3kWyLFNv5s/cbgM1ie8Y3WIBjD9hyLN8vgokx96uNSd:M306Tba2Z+W6k5LD5niABjphyBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c8e517af50b3da720f5229a68f62d9_JaffaCakes118

Files

81c8e517af50b3da720f5229a68f62d9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ