f78495c0a19fb94d2a615283e9d478b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f78495c0a19fb94d2a615283e9d478b4_JaffaCakes118
Size

63KB
MD5

f78495c0a19fb94d2a615283e9d478b4
SHA1

36ea64e5f266d381817677bfd9b5d6e8b31bbac9
SHA256

bb74b79b6f947c1f159a07d592bd588f2fd0d7f6a9ef3cf789cf700683882846
SHA512

582119e8c8ca7ef149f34e082c0ea8ce233ed578e47168e34a5c613845d336abb5b6459f3a3041b943175444fa1c8112c9c94a2a6f5d0338731ebba8d4ab46b2
SSDEEP

1536:T2uX9kStHU5qOHa4OeUeaSP8GMRR9Lc0a57/S:CuXyQHU24Ac7q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f78495c0a19fb94d2a615283e9d478b4_JaffaCakes118

Files

f78495c0a19fb94d2a615283e9d478b4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\KoryckoB\source\trash\repos\Valo\Valo.Tools\obj\Debug\Valo.Tools.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ