bf3396143cdafa2115456ab69b050c4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3396143cdafa2115456ab69b050c4b_JaffaCakes118
Size

11KB
MD5

bf3396143cdafa2115456ab69b050c4b
SHA1

ac7a638ce4f97a48d3e1e2f44411de9ce0755d64
SHA256

76d405e17970520ab40429a2a301f1678fa20900e941907a538ad4cfb898951b
SHA512

d5d0079e1921a5d57d65700d13dbca4194a5a6c7fa6b354a548386ea0b553e1f78a5ee2cff215d07a6f32316eadc1b78748a8d73cddf933ee93538e94e24fbef
SSDEEP

192:jdvaiG772dN6DEcBv4T2NPAmxE1rg5inP4aRzv:9Oe6j2T2ZPMjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3396143cdafa2115456ab69b050c4b_JaffaCakes118

Files

bf3396143cdafa2115456ab69b050c4b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ