d46cf5a3c218da6dccd0b6b7b46a7b67_JaffaCakes118 | Triage

Sharing

General

Target

d46cf5a3c218da6dccd0b6b7b46a7b67_JaffaCakes118
Size

46KB
MD5

d46cf5a3c218da6dccd0b6b7b46a7b67
SHA1

347c587b108709a37d27598bf072dbaf474c2775
SHA256

024c401269a72213cd0ba62c7817a51786485a19d017bdb34c936135cf2b66ba
SHA512

e47a1224ab3999c8d351a2b294997069a101ad5c66ac66b77411519dda8e3456dd6fd0ea7146dcb9ac8e77e7125eab64f7444bdda3c41329f0101ef76f29b5ca
SSDEEP

768:zUbz5ZKeKQgz2eh9nBRaIn9WwbRDQLgfhHgnzfRVGnTTIn5GnP:zUbgph9ymZXHpy4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d46cf5a3c218da6dccd0b6b7b46a7b67_JaffaCakes118

Files

d46cf5a3c218da6dccd0b6b7b46a7b67_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ