5d021e0420d04f03b6e2041d9d8cffd5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d021e0420d04f03b6e2041d9d8cffd5_JaffaCakes118
Size

4KB
MD5

5d021e0420d04f03b6e2041d9d8cffd5
SHA1

b241be78856065f8efaed3ce0bbd5e04d320a247
SHA256

3ba52d802e971d69ec3dea9e548ff757ffd8b431832312cfc4ac497219bd938e
SHA512

7ee79bcbeb2eca9c38320487f7a4f9283c8aff1281094d132d3de09f823da6fc6a218d224974b23e41c7176c29f5b3dfc07fcd63d04ce139208ad2310ee9406b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d021e0420d04f03b6e2041d9d8cffd5_JaffaCakes118

Files

5d021e0420d04f03b6e2041d9d8cffd5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Subversion\RR_Tools\trunk\Code\RRFlurryWindows\Stub\obj\Release\RRFlurryWindows.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ