dd856a8535d9998048184b1d8a77d326_JaffaCakes118 | Triage

Sharing

General

Target

dd856a8535d9998048184b1d8a77d326_JaffaCakes118
Size

12KB
MD5

dd856a8535d9998048184b1d8a77d326
SHA1

ed12730eaa0be3ff1f4899cb1bc5e08dc2fddee3
SHA256

28fd05b64c1d1fcc174e7860e18382c075b2be4a743476837a3d3980eed2ef2b
SHA512

16fcc8651b6c6b14fb2e9c730e7135709c141969c75fafe3df4333870ce7b7fb275abb29f45cea247b0cbea90adaef614d94a7ceb3143f1dde761566f96f2382
SSDEEP

192:cQZZM2VfaLtTgKxPxPo1VdWRo1/P53kxI7+E4FjfL:hZZMpxPxPo/Dn53DuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd856a8535d9998048184b1d8a77d326_JaffaCakes118

Files

dd856a8535d9998048184b1d8a77d326_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ