dcb59122940b683f09b8942e1c40eb24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcb59122940b683f09b8942e1c40eb24_JaffaCakes118
Size

15KB
MD5

dcb59122940b683f09b8942e1c40eb24
SHA1

5a664872ababa9e159ca720404a9fc07aaedabbf
SHA256

962bb83f1e33594725d9813a3336802662118b2336bd75cb5465ea76b3ea6760
SHA512

fbcd16d4dd993c05b80f9c996ea9100d2b443e00161c961c2911e121995f9bffda0bb62f496a2ab066b6d93dc2ff61c3caf7e9b98e394c1bfc3690b0a41f7335
SSDEEP

192:XEXLK+5krhegu4hTi8ih8dOs7+wDTu7X9rz1Gz7AmP6vNy+Itp5lWBk8E:qK+5kIgTMN8d77WXa3V5lKkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcb59122940b683f09b8942e1c40eb24_JaffaCakes118

Files

dcb59122940b683f09b8942e1c40eb24_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\User\Local Settings\Temp\d-_mqbdx.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ