a4a9ff8d73269373e298c189ce40e50d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4a9ff8d73269373e298c189ce40e50d_JaffaCakes118
Size

4KB
MD5

a4a9ff8d73269373e298c189ce40e50d
SHA1

ef4b6596a190fbf85ecb08974d0e1b85db66f507
SHA256

68684d279c6d1f020f094d50e3364e020d3fb306d3da04f8fdc4e43ae93560b4
SHA512

2eb5b3a6b39a2d18956d03c77221e07b16fe3089e9ac959d4ff00a58576f1578d0d79d85488ed2054e4b199e6228e76ff23775ce9290636ef5cd0d8809063f8d
SSDEEP

48:64IwO48NWuE7plR4KzJlKTCaNfK48dGqRBh9Rm9jENwFFGKh4:DRO3qlR1z+GaNSDXo9mwfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4a9ff8d73269373e298c189ce40e50d_JaffaCakes118

Files

a4a9ff8d73269373e298c189ce40e50d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ