d5fb057132ea8e9bc6712c6a46b0e492_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5fb057132ea8e9bc6712c6a46b0e492_JaffaCakes118
Size

16KB
MD5

d5fb057132ea8e9bc6712c6a46b0e492
SHA1

b656e93dfd45818528bb5d9b1c2f430cea6e0d4f
SHA256

fe58a05f29a4cf4ffc20cbc27b4a8bfd6b7509a0e03f2a63cf9539ede610f244
SHA512

a03d8d8c3d4fb2430b9186275a7dcf848dfb363aa9bf690befb5139c3bbf809c2232dba6b5f5783bc78fba1c55f909b464563ae6a8081b761a8aeb84aa186b6c
SSDEEP

384:DUNOSwmrWGLSTzYH0XSbztwZDFI4E2pGaig0XW0UJ/8gzCq4acz/cGP88y6gRGL:DHzYH0XSbztwZDFI4EGGaig0XW0UJ/8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5fb057132ea8e9bc6712c6a46b0e492_JaffaCakes118

Files

d5fb057132ea8e9bc6712c6a46b0e492_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\Administrator\Local Settings\Temp\zxj3njjq.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ