ba02d3f507a98b5f6205a2caed4684f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba02d3f507a98b5f6205a2caed4684f3_JaffaCakes118
Size

139KB
MD5

ba02d3f507a98b5f6205a2caed4684f3
SHA1

bbff65c22aec2afdebb62c9b47df8cb93ad15702
SHA256

30906b5ea2b2052c556c70bcb80bd52f93edb047110d125545f0984ed7c3da01
SHA512

9f90601fd4920ae25aaaa449a3fe24fd54e83273e69ebce6f96618b3be1ca6b46518cd979435d738ceaa76cc383bd74666d578be3babc852efbda5884e5a82ad
SSDEEP

3072:8MyNKP14Mtt/YtTgrHHmtvqidW+KXYEeX8:8XKPf1mtvP03Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba02d3f507a98b5f6205a2caed4684f3_JaffaCakes118

Files

ba02d3f507a98b5f6205a2caed4684f3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ