e08750634a62e0c59429e3a69ee3b56c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e08750634a62e0c59429e3a69ee3b56c_JaffaCakes118
Size

10KB
MD5

e08750634a62e0c59429e3a69ee3b56c
SHA1

e207decd37f37d4e0d4478ddaec73de5cbb6703f
SHA256

50730897a698a9a9289c2076949990862ce8c91c60783d3f8c4f6c17ac7c9fad
SHA512

940f539099eb17460e88ddd94e7acb4a402a4c41289d2a4dece1f2cbf4648480abcfa023d7aa756ac0ece46c8ca087cb587c3df18fb2d5d4a298b60c2ee7f2bf
SSDEEP

192:dxQfqndy+ZZN4F21Am3iUBKOHfT3fP2te:0SM0dYVOLfPD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e08750634a62e0c59429e3a69ee3b56c_JaffaCakes118

Files

e08750634a62e0c59429e3a69ee3b56c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\user\Local Settings\Temp\lue5d1cj.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ