052cc4e2616f499da1eb99869dd98624_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

052cc4e2616f499da1eb99869dd98624_JaffaCakes118
Size

12KB
MD5

052cc4e2616f499da1eb99869dd98624
SHA1

236d5d4798be10603eb0c4b5888dbececf4f4d24
SHA256

74ba768686d1ff6728a7b23e17018a76dac437473de3b3e0ae907301321b5e54
SHA512

7687b545d3a6f99136e7f1b656d7e15ff3e654a203a61e19642c2dd7bf9ae86f7e64e0d4b539a2c929c4abe765776e8c53d90f6b648e9730d56b4512afe939a4
SSDEEP

96:u/JQ/Oe/bN/4koeZ74k+vMv6rZO8uoJBlY9Oth3jaxRjxBzfixi+L7sjSVTT/Db1:kkAqBziDL7sqf6OAmeP2X0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
052cc4e2616f499da1eb99869dd98624_JaffaCakes118

Files

052cc4e2616f499da1eb99869dd98624_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ