97c12128dbabbeddc254a0b9111e22ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97c12128dbabbeddc254a0b9111e22ad_JaffaCakes118
Size

83KB
MD5

97c12128dbabbeddc254a0b9111e22ad
SHA1

ba56db9cc83cf8d5b08c48c5c93c72f4c3942502
SHA256

9147f153df29c1d207433c0eed90df99058932642900333bbc8f4cac51ca4ec1
SHA512

434bbac38b49fa095134bf15c3b8a9eaae2fefe352d7bad1cae800c64d7f181244b216566c7136b5e9bdfc162284cc949c9e6288cbd470f90cfcdace55d33447
SSDEEP

768:XnP9dWHDsrbMBt8sgRc/hhNtH/3t0ZJ/DZsRqnyDh6OwLfYXQ/c/9A:3P9dkDlBzgGhHH/3tsJDZsRqyiLw4K6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97c12128dbabbeddc254a0b9111e22ad_JaffaCakes118

Files

97c12128dbabbeddc254a0b9111e22ad_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\프로젝트\PROJECT7\Form7\SD\SDB220_RT_R\obj\Debug\SDB220_RT_R.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ