843efe346ffada9636e326869c82523e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

843efe346ffada9636e326869c82523e_JaffaCakes118
Size

68KB
MD5

843efe346ffada9636e326869c82523e
SHA1

4f19502a0abcc7807d4520f1e7e14daf3bf9d631
SHA256

cddcd4db826dd501798dac67e2830382ac16a3e67d8c8704661739a1a9437390
SHA512

9b24bb1fb4823c0b6e42593c7ea053e5c13387bb49a165a1dc42b6198e71828d1858c55c006ab911682d22eb54b7f86457ef768bb0116732f3f140a002fb6020
SSDEEP

1536:aJqdwWmxCYBpFBXaaayBAy99seBPR2M+BD6odOan:aJewWmC56odOq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
843efe346ffada9636e326869c82523e_JaffaCakes118

Files

843efe346ffada9636e326869c82523e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ