2fcb6006793dbe1bcf88efec2ca93bbd_JaffaCakes118 | Triage

Sharing

General

Target

2fcb6006793dbe1bcf88efec2ca93bbd_JaffaCakes118
Size

231KB
MD5

2fcb6006793dbe1bcf88efec2ca93bbd
SHA1

a57f45f29e92a09143509cff0ce273eef8654bb1
SHA256

be57c6e95d9ab6fb5b9d94a9e00ad1f5e22b0c5a7a6395403cbb85457c384daa
SHA512

b854ee404d7e6a7911302a72b8d63a6e45958d7ee41755f39f6ebed9bb2b66a1b768a72d669667ea9555c1c6c69bc2315b1412d27674bdb5297003a4cbb469c9
SSDEEP

3072:gfRds+B1+JeyPoH1cm/KtlySMkHJI1aN5A+cybvwF88FM:g5GJdPoH1cm/KjxxJd7A+1bYF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fcb6006793dbe1bcf88efec2ca93bbd_JaffaCakes118

Files

2fcb6006793dbe1bcf88efec2ca93bbd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

KBDt_Sebtor
cskwws_Mediztue

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ