34d9147f5402a9a63905d0750b39ecde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d9147f5402a9a63905d0750b39ecde_JaffaCakes118
Size

12KB
MD5

34d9147f5402a9a63905d0750b39ecde
SHA1

f0b8412a31e3d4df7f0efd319605ed615547ae65
SHA256

65c1cacde2c8a2274468a573837f5b3064e0b4800f99c8933eef240b43e61523
SHA512

d46dfa696fc91604cc77e096dce92721ea20d710f075c6beb855fa00edc7a832abe00e08ba5bbfbd57bca2d34a9acca9356b07923233531fbf0943fb53517d07
SSDEEP

192:tfvaD1NW+t4HD45aBQylE8Hi7o8Kwtk0iGmT5IH4rDaDwlRDNwsGy173JEQ0Z6eX:tfqCWk0KlIkDaDwXIQZl0weMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d9147f5402a9a63905d0750b39ecde_JaffaCakes118

Files

34d9147f5402a9a63905d0750b39ecde_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\KOMOTEV3\Projects\KOMOTEPATCHTOOLS\KomoteUpdater\KomoteUpdaterGeneral\obj\x86\Release\KomoteUpdaterGeneral.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ