2989ed69af046c9ef7b2e43a5eb2a3a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2989ed69af046c9ef7b2e43a5eb2a3a0_JaffaCakes118
Size

357KB
MD5

2989ed69af046c9ef7b2e43a5eb2a3a0
SHA1

51edadd01a04343eafddf6509a2e0363b47216fa
SHA256

b81242bed3348bdec7e2507b74653d50ecbf28c931153a58bf4185950137f6f5
SHA512

0258cbef2ff80551357b0f1cb8503c986ed30949e0cc9c1406bab8a7098747428453445c64f083ba85d1b1bc7e16bd0c980397e1b028192e650f6df2f0ca0233
SSDEEP

6144:fDkgffwmTj16GtSV41lANDm0ZHixLV/YJDsTDDLgoMYV:xHhTj1hS4/ANdHifKsjgcV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2989ed69af046c9ef7b2e43a5eb2a3a0_JaffaCakes118

Files

2989ed69af046c9ef7b2e43a5eb2a3a0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\Aermacchi\GSS\TaskLayer\DotNetZip\Zip Partial DLL\obj\Debug\Ionic.Zip.Partial.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ