dc67df0d23d5da992c6b8fb09983b495_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc67df0d23d5da992c6b8fb09983b495_JaffaCakes118
Size

9KB
MD5

dc67df0d23d5da992c6b8fb09983b495
SHA1

d68e04b54f37fec39484159e3f5551376e8cca97
SHA256

885b1a982ede58606d25dee9a9a934fa493a4b97c6ad20707f369d83adc12d9c
SHA512

54dee962dd38cc47502f762f9a3ed44a45aec4f980c25f933e9fa729648bfffea9ea4b23da5d5a74914842d0b4a3a6e7b1f623ac7907b5604132e2dd89931a1b
SSDEEP

192:LZpJvnJGpSvPgtzYJrlhm/Amhruzc7bMxX:jJvnJn3yYRm/nxbMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc67df0d23d5da992c6b8fb09983b495_JaffaCakes118

Files

dc67df0d23d5da992c6b8fb09983b495_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\praiwan\Local Settings\Temp\gsogtcfv.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ