5edfc2719a1224c023ef182b8e80f0ee_JaffaCakes118 | Triage

Sharing

General

Target

5edfc2719a1224c023ef182b8e80f0ee_JaffaCakes118
Size

193KB
MD5

5edfc2719a1224c023ef182b8e80f0ee
SHA1

b43760925a49b9eff2eb1acd2d631c618b07ef3a
SHA256

175d9b1a14236c8c8c2f40358295b22d9530917c5a19e19c07cdc0c2dcba49dd
SHA512

a8f623ff52f7ab0aa1f753ef1045a75f884559b4cd97814177f7058b072a44cc3f818c709979af2c9db944a3f9a1556d85565b2622c4c0c04b0939e48de3c0a4
SSDEEP

3072:zIDwMHEcZVaChb30EtF0wOdjfLRSPbn65xb9WA7K6XTbXu0cqn32wMePBzr7zYVB:zIDwMHEQDt6w4jdSPbmWAQUnj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5edfc2719a1224c023ef182b8e80f0ee_JaffaCakes118

Files

5edfc2719a1224c023ef182b8e80f0ee_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\clientsdk-dotnet-rt-tls\GameSparks.Api\obj\x86\Release\GameSparks.Api.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ