16ce9ffa92977431c5430c10cfe59318_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ce9ffa92977431c5430c10cfe59318_JaffaCakes118
Size

11KB
MD5

16ce9ffa92977431c5430c10cfe59318
SHA1

e6439bc2ec859a4c09fd01e937696480398ee056
SHA256

0a61b72d9adbae3e03c5600e1380ffc3eb92e4dc2ed9741876a4ad50798a0e1a
SHA512

0df86a56978ae8b8e1c6f07b99d7b7d9e811c2d91e7862644ed9640fa16b2bc8a10a548b60f1e2c11fb0c644ba2c39d0cc61ef2059e6a369bf6d140a4d11d6da
SSDEEP

96:QLymqmAamxef7gmK1SokMBD4m7zIpnmIsEnHaS+bl+RIG6/U6SqYKZ8wMT8qyBn0:h+myZiblpMK0yNSmyK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ce9ffa92977431c5430c10cfe59318_JaffaCakes118

Files

16ce9ffa92977431c5430c10cfe59318_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Sources\KioskLine\trunk\KioskProjects\BaskentElektrik\MaviYakaKiosku\Bedas.Web\Innova.KioskManager.BedasManagement.Domain\obj\x86\Debug\Innova.KioskManager.BedasManagement.Domain.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ