35dd3cf06c74577f5bbe63a7c73ae5d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35dd3cf06c74577f5bbe63a7c73ae5d8_JaffaCakes118
Size

292KB
MD5

35dd3cf06c74577f5bbe63a7c73ae5d8
SHA1

6d9c6c73ec1d3eaa21921b9920bf20815321fa3a
SHA256

2a534d88afe23bd6366ebfbff910bb953531d8b6048d5f4ef4a63e5d2eef11d3
SHA512

1f8f0c61b884354e4851a2a8e63da4d8d15535c459e3c35e044e0662f8a0050f4f9edd83ddaf734494c81a7edefd5c9eeec9b5f1faf479b583c21c004b3ce62b
SSDEEP

6144:vD0XZNUOXiSs7/hWiXgc8v/YvstG2ImloDsDzaOEHDz1izX7rGB0TGmzrfo6ryls:K6AyBqEZNM6V+ryO46LZ/FCXm5YLvfFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35dd3cf06c74577f5bbe63a7c73ae5d8_JaffaCakes118

Files

35dd3cf06c74577f5bbe63a7c73ae5d8_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Build.CPPTasks.Itanium.ni.pdb
f:\dd\vsproject\xmake\CPPTasks\IA64\objr\i386\Microsoft.Build.CPPTasks.Itanium.pdb

Sections

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ