ebbf4ea86c2cbd82b33ca0f27e8cd270_JaffaCakes118 | Triage

Sharing

General

Target

ebbf4ea86c2cbd82b33ca0f27e8cd270_JaffaCakes118
Size

13KB
MD5

ebbf4ea86c2cbd82b33ca0f27e8cd270
SHA1

5a1562255bf98dc68775e4de26c4b36b5c27eeaf
SHA256

200779654411c9d5c27b3fd79c0c2ddd59c5045d22979efc646ec0676ff5ef90
SHA512

fa8264e4ac93b433a40388679058405003e3d858a4d741543bf39b837c8f2d885d5e4d574d769218fe5325e1a786eeb6124142333746428b37f2f751ffa3956b
SSDEEP

384:bgmHV9nOLOWMsEp1YNhy+x8tbn3gNxmwY:RWBoQO/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebbf4ea86c2cbd82b33ca0f27e8cd270_JaffaCakes118

Files

ebbf4ea86c2cbd82b33ca0f27e8cd270_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ