14537fabbd4ab2138b03c6d6b20d78a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14537fabbd4ab2138b03c6d6b20d78a2_JaffaCakes118
Size

239KB
MD5

14537fabbd4ab2138b03c6d6b20d78a2
SHA1

6503b3be9990bb99fb20349c10a417d9df0fd763
SHA256

4f7763c78d9e703fd2ac6753968f3d367ad02dd0e8e46502a96300995a2752fe
SHA512

fc1f87f71e2af5df03579f0d74bf7b19532f1b8c84e451851f09815a408eb2f251af678fb12cedf6c180228edd52b4abaaeb1ea1db2eb6327deca880c1db7f09
SSDEEP

3072:uHgeu9FY3S6eJlCWgKzFNkMK1pDV/hdU59V1OOnL4ZO4lgWCYo8s5yH8wZAa:ubuNr+fPU3OOcM7qs5C5S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14537fabbd4ab2138b03c6d6b20d78a2_JaffaCakes118

Files

14537fabbd4ab2138b03c6d6b20d78a2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ