bda5d81e5ed947f89230ab70ae6a5512_JaffaCakes118 | Triage

Sharing

General

Target

bda5d81e5ed947f89230ab70ae6a5512_JaffaCakes118
Size

508KB
MD5

bda5d81e5ed947f89230ab70ae6a5512
SHA1

bdb7d64c5ba29a81508058a79d7db7c690ef09da
SHA256

c41623e26cf3f381019036d320171c7838ea12fe37a68536fe2ff77e58a2fa8e
SHA512

da2a9399384d7265d051c0b201b490c4383858972cf476d309f06bb4f836628b943de98a7baf3ec3190aac521a73c11f70c6ee1cd4e1e9d06f4b095e0eb13695
SSDEEP

6144:hxFZT8qbTR7SCUsHIIxFr6x5aKuKe49fm3gYjZIOitDEGJCJc7Ew4ECw55F0TApV:h7ZwgVmYq5nx83B1Kt6XkkTEr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda5d81e5ed947f89230ab70ae6a5512_JaffaCakes118

Files

bda5d81e5ed947f89230ab70ae6a5512_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ