17fbfba962f8e5051aeeab125e0d8fe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17fbfba962f8e5051aeeab125e0d8fe7_JaffaCakes118
Size

64KB
MD5

17fbfba962f8e5051aeeab125e0d8fe7
SHA1

7a7e0ceb7c4c6dc60257f13c5b97a788931effed
SHA256

e33730007dc0f1e5bfe94ba574feda4e839cb7ccc7172d77870a3ccfe1f1c79c
SHA512

78743ac8dc5c0b5b6addc8900f4fa6effb0b7967445b5687294b4aaf7161895d70d4f7634ea41ef4370f46b21b1d982e91b7503c0e26c2113bc4b0ef5c57635d
SSDEEP

1536:WH9a2IJqyXNOPnhy0jdiKHXOhhPbNy/GDYr0wkRAlH8U:WH9a2IJqqNeA4HX+PhmGDYr0wkRAt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17fbfba962f8e5051aeeab125e0d8fe7_JaffaCakes118

Files

17fbfba962f8e5051aeeab125e0d8fe7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

i:\id2012_1_26\nodebug\bin\Slb.iDistrict.ComponentModel.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ