d16b7b8378554c9ac2eb53487135d253_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d16b7b8378554c9ac2eb53487135d253_JaffaCakes118
Size

62KB
MD5

d16b7b8378554c9ac2eb53487135d253
SHA1

ab9a783f9e3f6cb32c97005b2cf550444ee82346
SHA256

cf3b0c234e0e61bca67a9cfc0cb6dec88b7e28ebe51c48e28bb9b7b27a416d68
SHA512

e89ae3d458509873d99c1ae78ce29007bb859e1752a3f8148c6f4744b53336845aff0d49a9de1e3d2ea6d239c75a051b370be00851a580d89447c7c8573cc026
SSDEEP

1536:ln6e2ITc8iK7SXK9EDXOAuAJ+L9Y9CELe1:l6e2ITc8iBXKrIe1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d16b7b8378554c9ac2eb53487135d253_JaffaCakes118

Files

d16b7b8378554c9ac2eb53487135d253_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ