c1fe24ec166ff0bd109f6787f56d1d66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fe24ec166ff0bd109f6787f56d1d66_JaffaCakes118
Size

36KB
MD5

c1fe24ec166ff0bd109f6787f56d1d66
SHA1

3f64885b1510e1b7894d7e7bcc9bd7a3044e7274
SHA256

e6a49f74ce61893aed8f46d82a8173b02036262c02f79ce415bf53529935c87c
SHA512

4a2af146654225dac8a496a3210b6db277acb0ec4c06dd6bda1b6883d3a0f21d882cb43810a1061fde14fbfcc81e8ed17ae79c9aa3f7ae81742693acfa8e15b4
SSDEEP

384:gkoJrD9a2nCrFPGat2C52+HlU4KrBJCWndsOtfTB:gkyD9a25Cg+F2+OtV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1fe24ec166ff0bd109f6787f56d1d66_JaffaCakes118

Files

c1fe24ec166ff0bd109f6787f56d1d66_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\My Documents\AppData\Local\Temp\1hbpwusd.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ