3afb7870057ba348925f82eb95833241_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3afb7870057ba348925f82eb95833241_JaffaCakes118
Size

100KB
MD5

3afb7870057ba348925f82eb95833241
SHA1

444af7b72320f69d307fc8d0e368a42c02042fa9
SHA256

0fa1fb8d5f7307ae7d318a21e32ff4378e7bd03aa673f0bf37099edd7f26bfb1
SHA512

bf4747cb4f38005e484c50be97baffcc91101a5459f7cd52e17706438e77852c67bf766b7191541e65528ef06f41ac68aa34953ad34b9fddcbe653c0c8fe877f
SSDEEP

768:9U2ZNir82jVOdNr2e9BQrrM59eOjF2MraTCDa1zxV/0THBukkKe5JxcZhzI4YQcz:VZYr82jVkgrOe8Pr3DAYQKe5DcZhzq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3afb7870057ba348925f82eb95833241_JaffaCakes118

Files

3afb7870057ba348925f82eb95833241_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BuildArea\workspace\ZCM_103_RC1_WIN\client\WinProxy\WinProxy\obj\Release\WinProxy.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ