4746be1f1a8ca8ef02fd5a3cddfbd36c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4746be1f1a8ca8ef02fd5a3cddfbd36c_JaffaCakes118
Size

8KB
MD5

4746be1f1a8ca8ef02fd5a3cddfbd36c
SHA1

c4ba89cf78647261046ec74af04af40b8dcc4387
SHA256

32dbaa3a2e9f7e92d91ff9e51bc27c3ddb9fce442b106634bc46acad576c79f3
SHA512

a532983f0e35b813ecb4cff4f78b35d4f54cfc8fc9a7a3fb0c7f8ed569c09bfc9c727aa4379e95c55620190c152a88900814b99849ca7801970084b7eb789235
SSDEEP

96:ELjDHGGyxJOKV6EsqPBuOiOi7GectfYRBHD/2Gsvn73dZO/luKiS0Bq4i4iOwwuK:KjjG0mNvpumMl72jd9w0Bquww3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4746be1f1a8ca8ef02fd5a3cddfbd36c_JaffaCakes118

Files

4746be1f1a8ca8ef02fd5a3cddfbd36c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\David\Documents\Visual Studio 2010\Projects\V2.2\Turbo.Workflow\Turbo.Workflow.RuleSet.Service\obj\Debug\Turbo.Workflow.RuleSet.Service.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ