a5c59ab00e7ed62a8398c38d740d55d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5c59ab00e7ed62a8398c38d740d55d3_JaffaCakes118
Size

142KB
MD5

a5c59ab00e7ed62a8398c38d740d55d3
SHA1

ea4b82f3cf6a8abe8266678ad3415123b3372eb1
SHA256

527d3c01aead8bbca7120af54d013fd16cf4a3accb02446ec8ecb8afd0e18f7d
SHA512

28c4a128339c807af0caa7e770a12038a5b01b8def9d730111f86735c6f86bdaa57a0e462cb8e0ede2ab7f172cded907f4f75f33330fb59a845e19c0e6725ee5
SSDEEP

3072:3ZI8LevWXvNcORm7IWvq4+ZMCVm7t5W/RoHi0h2L4iFotClIhAvqJuJ82bzs5H0D:3pfdRm7IWvq4+ZMCVm7tcoHi0h2L4iF7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5c59ab00e7ed62a8398c38d740d55d3_JaffaCakes118

Files

a5c59ab00e7ed62a8398c38d740d55d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ