78644e6a337c62dfee238ccd9bbb65de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78644e6a337c62dfee238ccd9bbb65de_JaffaCakes118
Size

16KB
MD5

78644e6a337c62dfee238ccd9bbb65de
SHA1

99262f9b3bf0d0911ed81e7007c84dacd99bd5fc
SHA256

b5ae622a55ce2df4922f23097a0fb21c993f056dc5fe859fc1c43c160c513a87
SHA512

b1b8ae9ddcbb48d7ff069576a6b42acb5e38138bb9b86e9c55685b2d455a393ddff8a1a7f45cda7832dab3d48266f5fa94a3e2a983a0dd1b75012122299c34bd
SSDEEP

384:1khv2CSBQF3SMcARbbrUrJHuFZeA4SytFto8d:SECSaFCURbbQJHFtzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78644e6a337c62dfee238ccd9bbb65de_JaffaCakes118

Files

78644e6a337c62dfee238ccd9bbb65de_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\svn_Wulin_Src\jyqxz\CorgiServer\ClientHelper\KODNetwork\obj\Debug\KODNetwork.pdb

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ