0e11a9df831345ae9149f563064699f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e11a9df831345ae9149f563064699f9_JaffaCakes118
Size

97KB
MD5

0e11a9df831345ae9149f563064699f9
SHA1

9755f5ba84092e4ff02da33642a65b4313c6343e
SHA256

ad438d7b998d4b26c1777c40751e5d99f255cfc037cd0fd7d21883b679e06175
SHA512

43bd4f7c3be5a9f68a5d16f14bda56859aad1d6856927d7e01ab05ff71b62de4e13db6f0c7d1c01b3caefaed78939d8a8a8db647033f9233873b055806c16076
SSDEEP

3072:tN7IpBiVxM1GiZ8pZxHlZ0DgJe6pyEns:X74BiJpHHlZ0DN6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e11a9df831345ae9149f563064699f9_JaffaCakes118

Files

0e11a9df831345ae9149f563064699f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\dd\vsproject\xmake\Utilities\objr\i386\Microsoft.Build.Utilities.v3.5.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ