230c2ab3df1de9f3d54352c374fd31c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

230c2ab3df1de9f3d54352c374fd31c9_JaffaCakes118
Size

88KB
MD5

230c2ab3df1de9f3d54352c374fd31c9
SHA1

587ba6c58ddfb24d035d7f72f00b7daf4da3b928
SHA256

9f1a08d8dfa7482689ae25d6b198bb36a09ae98763a1c58b76d837022f471a67
SHA512

0178fdc0f382f0153b96f3a67c3a943b6032ef17729731be4b2fa4e6d3392d18fe394a1169c9258a5a73331e3225fbaae36c9841080baa4e9c1166f897e61cb0
SSDEEP

1536:BjNsLyXT5XgPOfkRIExx6xNjduuPWF3t0AAzWlqF:JNsLGExMNjduqy90AAzWlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230c2ab3df1de9f3d54352c374fd31c9_JaffaCakes118

Files

230c2ab3df1de9f3d54352c374fd31c9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Dev2010\Leonardo\Client\Infrastructure\SCSFInfrastructure\Infrastructure.Interface\obj\Release\Infrastructure.Interface.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ