31d628b666defe7dda56bafa706e5b23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d628b666defe7dda56bafa706e5b23_JaffaCakes118
Size

4KB
MD5

31d628b666defe7dda56bafa706e5b23
SHA1

cade99b8dac3b0747f84f3d501015e64f6d496e1
SHA256

b6d6494ddc51bfecb117c4dc6b38230cdc701394f64a00b407d151f4698b36d5
SHA512

3735090e2f675b26a9b2a3a0cef80d1d158ef383bc3b26de6750dd65f1ab2fad1d10a4dcd6c1c76fc477509e9591e0923d9d6f41393d25d7185ee809a2695177
SSDEEP

48:6kOkWdGc5PGDN9NzaWbeTVPtUWuJhvktiDj4s3ShyzlN3RmnF:aV15PMbaWa1tGktiIsi2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d628b666defe7dda56bafa706e5b23_JaffaCakes118

Files

31d628b666defe7dda56bafa706e5b23_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\ELMO\Downloads\GridDemo\GridDemo\GridDemo\obj\Debug\GridDemo.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ