d5ac7a475d485a59f605d0c17a34b97c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5ac7a475d485a59f605d0c17a34b97c_JaffaCakes118
Size

13KB
MD5

d5ac7a475d485a59f605d0c17a34b97c
SHA1

8873b69fd13368622342a08a238cfb529d38caae
SHA256

4c383bbc7008910bcf0d821135cc1ef637fda3a378cbc28d806d6273a3cb2603
SHA512

480259cf692bf45f53c2c1d494d19527de9ffc44a4c40da4511f5821154207ac08a347349f9fe3bbed3302ce44a20d2cb9eabec369147255c86f90071674b533
SSDEEP

192:6cwuZZqiOYP6i0AuBhXCgpbbKOiiAmL35VGdm:6HunqiOvi0Au7XCghbIiNAm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ac7a475d485a59f605d0c17a34b97c_JaffaCakes118

Files

d5ac7a475d485a59f605d0c17a34b97c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ