5c9c5f5864a1db0ca23f1769753b087c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c9c5f5864a1db0ca23f1769753b087c_JaffaCakes118
Size

7KB
MD5

5c9c5f5864a1db0ca23f1769753b087c
SHA1

7d4759781ca86128959adeeba43dc2dd8196db32
SHA256

caa128a928ad948674d4192043d5e9be45f02a0545f6de0fb1c3be28a238e5e6
SHA512

3fe24fd9f1fe385ee760fc3b47b89f5e7eaef5263145089fc07e7dad00f71fa3113dfc049ed70038f5f60e0a2f6125db40b9f29ba88086ba08fa5903cab422c6
SSDEEP

96:dQibzAiHjGf+Ch90FTvk4maosGo9zPNQ5t+uwW6cSUSpLfWS:O6DDGOT7maodYzPNCZSNpLfWS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c9c5f5864a1db0ca23f1769753b087c_JaffaCakes118

Files

5c9c5f5864a1db0ca23f1769753b087c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projekte\SKYLANCER\Skylancer Mobile\project\Tools\MicroSystemRuntimeSerialization\obj\Release\MicroSystemRuntimeSerialization.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ