b737bd58d61d9221806c020d96a38e4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b737bd58d61d9221806c020d96a38e4a_JaffaCakes118
Size

13KB
MD5

b737bd58d61d9221806c020d96a38e4a
SHA1

fd223a79413bb43bfca417aabe87c2a38b0d16d3
SHA256

6ed29aa3e8e3933bc855baafc12e2bd97a4d0427bf7112fc9038c86a86303890
SHA512

11dc84720a46fff7269a9007d55b318a8d7d37165c1614eb353a3ff2ff263be60c2bb08c498d1b17c44b23f696e061b1a584629e431b1df593af61b26d774630
SSDEEP

384:G5PZ5nLbGBCfuE1VjhzYyhFddgtPSPsCWh2cFw:G5bnLbGBCfuE1VjhzYyhFddgtPPCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b737bd58d61d9221806c020d96a38e4a_JaffaCakes118

Files

b737bd58d61d9221806c020d96a38e4a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ