416dbaec6aec39a73af1adce13b6ad72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

416dbaec6aec39a73af1adce13b6ad72_JaffaCakes118
Size

11KB
MD5

416dbaec6aec39a73af1adce13b6ad72
SHA1

759a285b26874b3dad08c040ad129fac5e0c6fb0
SHA256

187a33967035cf3a1551ea1da9014627c506ae83a61ae0a2d23c72d3b0f023dc
SHA512

92b2133e52c74199c089e0c9d40317ec4d0631b0bd1add299a1187a15127e272e7bd18ae737057bd392b1425fa60161b64e2e630285c8816b77add2c47257560
SSDEEP

192:RBAw/JcToK5MAyZVi4ZkoYtaB0JggGbPECGHZmeWq:RBAwxcTZoC4Zya2k7AZmDq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416dbaec6aec39a73af1adce13b6ad72_JaffaCakes118

Files

416dbaec6aec39a73af1adce13b6ad72_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\benoit\Desktop\installpedia\sources\es - v2\Utils\obj\Release\Utils.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ