fd6670e43b7c1752a63c84aaa30cabb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd6670e43b7c1752a63c84aaa30cabb5_JaffaCakes118
Size

4KB
MD5

fd6670e43b7c1752a63c84aaa30cabb5
SHA1

70df038b22d9e39eedf365478fba318ef0ccff6c
SHA256

87acac6936df3125b5d90354726a233995c958c52adf2413fb516bbc00b8e1bc
SHA512

f5c2c53b05e08534a7887767e8f0794d8a792caf1b8e95e192b3f029dfe1696d15f6ce7fcf6a03e768c346701e1873699548b1b511406da8449b1ad6355ef478
SSDEEP

48:6nq73p8Ul8lR4jLP1oPlSCagKKOJadGqwWBhVdTftTjEGwrFGKh4:b7VSlRo1oragvDBvTNwxj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd6670e43b7c1752a63c84aaa30cabb5_JaffaCakes118

Files

fd6670e43b7c1752a63c84aaa30cabb5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ