0b79ffa82e46e507f74cd529e90af74e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b79ffa82e46e507f74cd529e90af74e_JaffaCakes118
Size

63KB
MD5

0b79ffa82e46e507f74cd529e90af74e
SHA1

9af97a5ada08a5b4154c62ef0af23b757120c2b7
SHA256

464ae41851aa32d7b0642870143dde062f2f09f34c2aff868f4e6afcd3f3dd93
SHA512

ae8bfa192721838e5f90c17cf089d83b70d165ff5537cdaf5f8bb2b07ff7508f0f0a541f4ff22b717aef5328bbd7f7dc486944db23909a6657b314fe49e6517f
SSDEEP

1536:ed64KWInjtY1vRpUHzKh+iUeaSP8GMRR9Lc0a51/3:/59Y1vYOEc1v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b79ffa82e46e507f74cd529e90af74e_JaffaCakes118

Files

0b79ffa82e46e507f74cd529e90af74e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\KoryckoB\source\trash\repos\Valo\Valo.Tools\obj\Debug\Valo.Tools.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ