16defb280c38e7fcd2e6426e4e2d07be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16defb280c38e7fcd2e6426e4e2d07be_JaffaCakes118
Size

13KB
MD5

16defb280c38e7fcd2e6426e4e2d07be
SHA1

8ef38ce1f4545f55f22b4cb0562067ffe7e9259a
SHA256

464b25aa45d9d23fad49348eb9555aaa539ac2298cf7d94b5bfbd07dfa1cd398
SHA512

d36133e3cee50d781d437a9c697c2c7d61c2f5c0dc35b8661b89b7e027bcfa86948ee2bf163c017b37998067036e1003b05679333939e7456a7df6bbb0f39bdf
SSDEEP

192:tCLAX3ExdvdnwlpJ4HmMAOkigYDdCRYloCJhho:tCLcExdvdn77AOkiHqoW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16defb280c38e7fcd2e6426e4e2d07be_JaffaCakes118

Files

16defb280c38e7fcd2e6426e4e2d07be_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\noppon\VSWebCache\NOPCUBUC-PC\CTF2Cal\obj\Debug\CTF2Cal.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ