3e0686c126355dcf9cb1971d52034e36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e0686c126355dcf9cb1971d52034e36_JaffaCakes118
Size

12KB
MD5

3e0686c126355dcf9cb1971d52034e36
SHA1

4acf70320dbbfc9fddbbdf356b65a9c4519a9c87
SHA256

18647b865260b6abe069efcc5736215a21aa4c70402634d9dd1e708ae8f48505
SHA512

9ec3aee6b2aba0e4e43d29a6542719b57cb7f3700bc47e47398f716fa0a949ecd71a8d3ef2c6ffec585679ac7edf5f03d43a76b200f0d0f0a91f2159457c6534
SSDEEP

192:GLS+VIBIa6Q4lvGEwEZVnnlYJL/eHDhJNIDLTmgzXqAN5:GLS+2p6hCs2qHDhL+LTvz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e0686c126355dcf9cb1971d52034e36_JaffaCakes118

Files

3e0686c126355dcf9cb1971d52034e36_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Work\Programming\Hattons\Source\XMLConfigReader\obj\Release\XMLConfigReader.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ