0f6e17028a135ee37661d7cf0cac2b3f_JaffaCakes118 | Triage

Sharing

General

Target

0f6e17028a135ee37661d7cf0cac2b3f_JaffaCakes118
Size

74KB
MD5

0f6e17028a135ee37661d7cf0cac2b3f
SHA1

671c392dc30c4a4e803209b520d22ce7b41ff14e
SHA256

6f36670b9c8b51f7403d499fbd84c244f15a5a224253e318466416fc7c43586b
SHA512

fafab7fc9fa1d09218dabcf383be3442ed6911f84b46a253712a20ee964246cf299a8e12f2b85c8ba37d349b902fb72505f5420b8be2e6b61b7548fa585cd7ad
SSDEEP

1536:BJiH4jHS3L2XC6DqUzk8uF+rC6dqaWX82o:BkH4jHwLf6DqUKF6C6dqdX82o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f6e17028a135ee37661d7cf0cac2b3f_JaffaCakes118

Files

0f6e17028a135ee37661d7cf0cac2b3f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\projects\MI\Code\Studyserve.Web\Plugins\JobRoles\obj\Debug\Studyserve.JobRoles.Web.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ