180089220297d8eaa51b6e125092ec1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

180089220297d8eaa51b6e125092ec1a_JaffaCakes118
Size

25KB
MD5

180089220297d8eaa51b6e125092ec1a
SHA1

64e2a79a727d2ea6c44a23287cb0f036777f83ed
SHA256

a6b1c872649f7492492a653d082d7c8243fa4aa79be0234aec7b6a34423dcef0
SHA512

e61520fdae1ad1c51f58b36200c8b59cfcfe11d300d3e5d9f1db527bc3bbec44b8031cd7a85e6bb15f543aaaa77e818234d58457c6ac06d0c1557d741767cc6b
SSDEEP

384:M30XKTba2Z+HWS3kWyLFNv5s/cbgM1ie8Y3WIBjD9hyLN:M306Tba2Z+W6k5LD5niABjphyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
180089220297d8eaa51b6e125092ec1a_JaffaCakes118

Files

180089220297d8eaa51b6e125092ec1a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ