26bd0a46270a84f61b584d116559e010_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26bd0a46270a84f61b584d116559e010_JaffaCakes118
Size

22KB
MD5

26bd0a46270a84f61b584d116559e010
SHA1

aa3ba010d6ac7f1a5197ae07bed5f913e6e9d79e
SHA256

fafff1b5803b032a5e9b49366b4e329361f3abe55a10ee37ec705ddd7d25dde9
SHA512

c1f3c9cbb4d447ce0a17fade41d5f8a6632503d6398eb733ed2897dcba4109ebc219beccee25c8f079aafe9dace6cc01cf0c378f04fb45c22de2574c0e4dd7ce
SSDEEP

384:SsPSu2K1GjqmYdnx7b0DDOdxlQv3rLO0VSLjh1h:SspGmmYdnBb0DCdxlvvh7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26bd0a46270a84f61b584d116559e010_JaffaCakes118

Files

26bd0a46270a84f61b584d116559e010_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\tools\????????????\dotnet\json_lib\fastJSON v2.0.14\fastJSON\obj\Release\fastJSON.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ