b39db6d243af113e401c0df8e3225e01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b39db6d243af113e401c0df8e3225e01_JaffaCakes118
Size

60KB
MD5

b39db6d243af113e401c0df8e3225e01
SHA1

1ace1fda53dbd4ee75ed8136b8b17c1839f2f768
SHA256

3e1a597ca4e325e28cf578e091a13be3828ac6768a058324688c91f86a338d63
SHA512

650aa5ebd2679aaf43d8de5313535c28723f878cf423da0f6a70f6e5473a7e633597d27d5583edc702d0a63d62ed16faaa6c9fc8f5b4cec1450c1825011566ec
SSDEEP

1536:fizMzR2/oJiLUFeXwwKjctI5srL62auOk1nwgCG1IxGCYSkj:azM92/oJiLUFeXwwKjctUu62adG1qfYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b39db6d243af113e401c0df8e3225e01_JaffaCakes118

Files

b39db6d243af113e401c0df8e3225e01_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ