3f069f3ca0d85279f7b84d625a0e559a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f069f3ca0d85279f7b84d625a0e559a_JaffaCakes118
Size

100KB
MD5

3f069f3ca0d85279f7b84d625a0e559a
SHA1

93e85a4bc66156b41e10a2346cad62e75dac0c81
SHA256

417ce4122468aa6475bec0367d375b6a908f32b7292715795776f8f8f275fa27
SHA512

d79e2681024609c1afec4278a94384cc8cd69939f132d4162e1ff189cadeeeca70da2edd4e8d13f53153874085201166b1a9bd9e540588eebd74412b19578ecd
SSDEEP

1536:101dZ7ARMU2ex8eLBSyuZo52tN3VgJnL7Eu6pXdUPseR:cK2ENLgyp2tN3VgJnLgSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f069f3ca0d85279f7b84d625a0e559a_JaffaCakes118

Files

3f069f3ca0d85279f7b84d625a0e559a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\buba\Desktop\1.9\Patriot\SmartIrc4net\obj\FX1_1\Release\SmartIrc4net.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ