0d9a8cc0e8fb4dc2b6164c72e380ca1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d9a8cc0e8fb4dc2b6164c72e380ca1f_JaffaCakes118
Size

19KB
MD5

0d9a8cc0e8fb4dc2b6164c72e380ca1f
SHA1

850869fd3cf644c897f51648621278bef322a5f1
SHA256

a100e4928317698df905539df98c29bb71230a7f88c30e2e7c0752716e9f650c
SHA512

e8dd00bffe1a3d1a7b50b047287f517bd8aa1b8e57945ff894c8f7ebeefb6fe81588d8f6217bc2926b63c392a1926b090a262d008a0e6de40fd218e2efb68e35
SSDEEP

384:OelmXtblSXVa+UnLQ2OVDcZ9M8cM9ycs995OrE2iedyj4HBxhBpzqJEj0JE:5lmXDQ2Zfhd9H9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9a8cc0e8fb4dc2b6164c72e380ca1f_JaffaCakes118

Files

0d9a8cc0e8fb4dc2b6164c72e380ca1f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\workarea\8.861.4\apps\ccc2\Source\Foundations\PCKGHLP\PCKGHLP.Foundation.Implementation\obj\Release\PCKGHLP.Foundation.Implementation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ