da5b90c7ab30ec94a447fb1b787ee266_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da5b90c7ab30ec94a447fb1b787ee266_JaffaCakes118
Size

96KB
MD5

da5b90c7ab30ec94a447fb1b787ee266
SHA1

e129a61bc6b50b42e707a7861b1f3373cb7fd2f3
SHA256

58559a3dd780f86a19ebc6b6af5a85603e89b00d00060905a540660c7da97315
SHA512

6ea3503c3341113974a5069777f602908f437f1484dc14828efa4fc80614fb151e1ad3a207be2e2f4043fa3d97edb79687d563002fca0a6eea8a3e47a572aa8a
SSDEEP

1536:cMzvZ/Xwp8xvrrZGEp9be0tJSM6DB7zM54s2r54svAk8xvrrZG:Lzvlw6tpJSZDBvM54sy54svAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da5b90c7ab30ec94a447fb1b787ee266_JaffaCakes118

Files

da5b90c7ab30ec94a447fb1b787ee266_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ