c1fb78d99ca3b69cf38f6db597cf30ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fb78d99ca3b69cf38f6db597cf30ae_JaffaCakes118
Size

14KB
MD5

c1fb78d99ca3b69cf38f6db597cf30ae
SHA1

8ba8a5599ccb112b7dc0ccce6b2caed28f23148d
SHA256

529ab958be3677b68119742eec0bb510e5d92af7fb0bb4a5df51bec230b8d19c
SHA512

39fa63a5c6aceef48b0e1f930102b378cff44784fc3ddb4bc8aa66efdf6404ab69fb3b9beaee8da53bfa713113a4a767f0c86ba42bc719a37c41b9c6b2377ba6
SSDEEP

192:B7nhlvlSlWlahD1mf1BbgO/l/aR5/nkHBcZV+nlYJL/erYEc5pzRcIDLRvhcBDF:Bbz9WiNfrgO1af/iWtqrFc59u+LRv2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1fb78d99ca3b69cf38f6db597cf30ae_JaffaCakes118

Files

c1fb78d99ca3b69cf38f6db597cf30ae_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\1337\Bureau\src 3.3.7(1)\RUNDLI32\RUNDLI32\obj\Debug\RUNDLI32.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ