43a5114819c4a725a782f1bb1e0f46ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43a5114819c4a725a782f1bb1e0f46ce_JaffaCakes118
Size

200KB
MD5

43a5114819c4a725a782f1bb1e0f46ce
SHA1

8f1d718ab73678e3c56f798af64380b446294ca8
SHA256

5f9f29524ab97f5ad0f462db2a233c6bb490bcce485fc4aab0d71925dabb508e
SHA512

8e746da36db192ac37846e77bb3d52ca1cc20455e5ef0ecfc4ff6cdd83cfe1cb6247eb669d01ff72588e5c6d19bd0951597e78ff1574dc2180e87d48ff86fa9a
SSDEEP

3072:ipSDlYLM08E5PeOM5vP9ZgURUD8N/VVEs//p4zvMMiG:4S6LOE5u9FRrj9Ai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a5114819c4a725a782f1bb1e0f46ce_JaffaCakes118

Files

43a5114819c4a725a782f1bb1e0f46ce_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\cbarton\Documents\Visual Studio 2008\iBryte\Subsystems\BrowserObjects\BrowseforChange\obj\FX1_1\Debug\BrowserObjects.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ