3d47b53283c5594f57f661c7893cc873_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d47b53283c5594f57f661c7893cc873_JaffaCakes118
Size

40KB
MD5

3d47b53283c5594f57f661c7893cc873
SHA1

555d9f0b335d0bb415c1560cedeb5492d46194c0
SHA256

e7f03228fe06a51f0d357f12d446bab0bbe7f13b14d546b38d5fdd1bdb710388
SHA512

72e17e7975a397af40be3cbe20b06892ab101f5917204725b9bfa7ddaba74b02455081a5923e43a79b092451a34287787b4787bb2f923606058658cab8ef053a
SSDEEP

768:j9pmV1HjEJ2yJJJVuPtQF5xaa2skJwBPkWMOdxqKVtJ3TsswyC1dIuV:R7J2yJJJVuPtUFsswyCIu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d47b53283c5594f57f661c7893cc873_JaffaCakes118

Files

3d47b53283c5594f57f661c7893cc873_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Vodafone\Projekte\SRC 10.1.108\ConnectionServices\Interfaces\obj\Release\Vodafone.DeviceAccess.Interfaces.pdb

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.extrel
Size: 1024B - Virtual size: 655B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbgmap
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.il
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ