0734460226ad027a0c09892fe23cc15d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0734460226ad027a0c09892fe23cc15d_JaffaCakes118
Size

62KB
MD5

0734460226ad027a0c09892fe23cc15d
SHA1

defcccccb3a8e2c96025f517d8e2641b374ecd79
SHA256

9174dde0418eb00a7942f1c5d46893bf8b1edf38069099f0da552e8af97a36f8
SHA512

d0c2837191208c9f9d9b3ca4e5c05e5eec921e49c4fa5c6b682038c2fd19edd1983c65c4ca7f162223a431c45ae872a613d02dc2db6f68f67a64451a4b4e9c2b
SSDEEP

768:PSsvL6c3a4fEUJteXYX++0F7RMe6uo1RNBsJyvimBim:PhL6aSgP0F7RMe6uo1REJyv7BT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0734460226ad027a0c09892fe23cc15d_JaffaCakes118

Files

0734460226ad027a0c09892fe23cc15d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\Studyserve.Net_SkillsServe_PreRelease\Code\Studyserve.Web\Plugins\PortletLibrary\obj\Debug\Studyserve.PortletLibrary.Web.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ