0969dc1484593a3193f31ea5ec2334bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0969dc1484593a3193f31ea5ec2334bb_JaffaCakes118
Size

90KB
MD5

0969dc1484593a3193f31ea5ec2334bb
SHA1

cb59760dc3e94deabf2a0a4dc2dd1eb88551aeb8
SHA256

363231447714bd6b4a007df4ea78cb1d912da129d200c737ab44f597d736be1f
SHA512

3a6acc14432e8f9e5b300bb972d96018c1ab45daa39e25cdd7f064c521467c05b94e771111e7d996499094c7997dbbbf9632602c8318409f69ec5a72c84542f9
SSDEEP

1536:aboI2ZQWCCx2DxfFXn58bHF3ShdzGpQoAYkc4Vr+CNZEv5SBUWEv6EuQaaAsvuZd:aboI2ZQWCCxoYA1BU1v6DFB0PR2uz4yU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0969dc1484593a3193f31ea5ec2334bb_JaffaCakes118

Files

0969dc1484593a3193f31ea5ec2334bb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Help\Unity Projects\SmoothMoves\Working\SmoothMoves Library - Separated\Runtime And Build\SmoothMoves_Runtime\obj\Release\SmoothMoves_Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ