52724a02fe4ccec452e625ad1c1ab98a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52724a02fe4ccec452e625ad1c1ab98a_JaffaCakes118
Size

34KB
MD5

52724a02fe4ccec452e625ad1c1ab98a
SHA1

0ab216853ebf9768df357539486d940658e7ee5c
SHA256

858601736ea579f68e7dfa158b6e2ede009573ad8a2f9b525d1f345d1a241d28
SHA512

571d7ed4661ae0b7bd1c82b205fa38a75710b048f91616d11d9387ed0557525fd1276d755347838c57f33fd08b8a25ff72b5063250f9c978d19a178d6b5a1ef2
SSDEEP

768:UZ9yYN8a1kfsEomMp/ZTtQO16XWM0fDkHOC:UjyYNP1kEEomMPKWjFC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52724a02fe4ccec452e625ad1c1ab98a_JaffaCakes118

Files

52724a02fe4ccec452e625ad1c1ab98a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ