41b3aa1c9b0f485e5269fe20461dc21c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41b3aa1c9b0f485e5269fe20461dc21c_JaffaCakes118
Size

20KB
MD5

41b3aa1c9b0f485e5269fe20461dc21c
SHA1

4e9f20b7b3f293855d3e4e0ce139f228326218d6
SHA256

62673f7fcf7ec8684bdcb6d54dedb3b08d9e812dbd61d022d9826853b46dd847
SHA512

0e3413a4de2f1a3ccb396da9225f858733896059bb1d9adc4b1f6b13f05a648c84948d925b8a893e01e155f6b4ece5ab238c02e2911524e3b874ef5cfd2577b9
SSDEEP

384:IQVbqqZlK56YutrtTFV/8LFrEj9DqHHhpP87oof:IAL/JApRof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b3aa1c9b0f485e5269fe20461dc21c_JaffaCakes118

Files

41b3aa1c9b0f485e5269fe20461dc21c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\sno\trunk\projects\Agents\Notifications\Provider\obj\Debug\Mi.Sno.Agents.Notifications.Provider.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ