43ea46763fa03edfa38e2c619158a95e_JaffaCakes118 | Triage

Sharing

General

Target

43ea46763fa03edfa38e2c619158a95e_JaffaCakes118
Size

44KB
MD5

43ea46763fa03edfa38e2c619158a95e
SHA1

6c2334468b51dc4034bc2824aa5618ee9d2ad8b1
SHA256

6c6fd96a8094ea00f157e7540149429299450b8002116af3088b0acabeb14536
SHA512

f39a7e9d92e0abc8d6c60b54ca6ab0526888507ab4a4734321f93dc72dcabb7e041ba6efea8352221da1c528071deed6a0de0454555e25ee2fddd5cb44b2fc44
SSDEEP

768:8EL48AImTizcBQRSMwvx4cmia2hwsH1thv:8EznqizcBHtx4cmiahsLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ea46763fa03edfa38e2c619158a95e_JaffaCakes118

Files

43ea46763fa03edfa38e2c619158a95e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\workarea\8.961.3\apps\ccc2\Source\Plugins.AEM\SourcesKit\obj\Release\AEM.Plugin.Source.Kit.Server.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ