2cc5c73e5240b43a23c4ddccdbeafef3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cc5c73e5240b43a23c4ddccdbeafef3_JaffaCakes118
Size

106KB
MD5

2cc5c73e5240b43a23c4ddccdbeafef3
SHA1

2da736d715f8b9fdb06ec9a82594b75c1aac704c
SHA256

e754bb8536dc5c4625a189655430bc979febfe0ba63d0dbae27bda5d04f38c51
SHA512

7ffea577e6e86168999a395e7b83900f308e33afd546d8613e0491389a962a4a7b4a86b028f1a6f7c76cf92ae4c4fbf16d61d526e96bd86e1e1365e3e1721a69
SSDEEP

1536:Cf8LPvHtSsyPPq0+EzIGPa6W8+EK8TH3/dr6/U6OSIt0YGR9:3tSsP0+EBk86g/dr6/FOSIt49

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cc5c73e5240b43a23c4ddccdbeafef3_JaffaCakes118

Files

2cc5c73e5240b43a23c4ddccdbeafef3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\AKY_CODES\AlgoTraderCA\AlgoTraderCA.Modules.PlaceNewAlgoOrder\obj\Debug\AlgoTraderCA.Modules.PlaceNewAlgoOrder.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ