b81db18c2570aac40494f4d38503fe22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b81db18c2570aac40494f4d38503fe22_JaffaCakes118
Size

15KB
MD5

b81db18c2570aac40494f4d38503fe22
SHA1

d0268a4b330b6539a9097726155d8bb652066901
SHA256

4d46b468b627d77dcb6113af3baa120bccccabd5ae348a195af81de45c0798a2
SHA512

8b7ef2967562fa6feb651ee8a70025b55c410eeddad888f544736029ca5c98434df9ab9a84765fbefee9458c3d48d7e6410ada430c0fb0dbca7a4cba4c4fe7b0
SSDEEP

192:cEXLK+5krhegu4hTi8ih8dOs7+wDTu739rz1Gz7Amu86vNy+ntp5lWBFx8w2:XK+5kIgTMN8d77W3a3FmlK732

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b81db18c2570aac40494f4d38503fe22_JaffaCakes118

Files

b81db18c2570aac40494f4d38503fe22_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\user\Local Settings\Temp\cfb87ubo.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ