447e5ac6fc298442df17fa4e86314985_JaffaCakes118 | Triage

Sharing

General

Target

447e5ac6fc298442df17fa4e86314985_JaffaCakes118
Size

1.1MB
MD5

447e5ac6fc298442df17fa4e86314985
SHA1

a89d40561c60fe6da4a6b49a77af4a2f38760a2b
SHA256

57091f6a989e9e8ccfaa1edf9762ed5e7901cd2d6f3e2edcffd9e6bceb693944
SHA512

9fe5c3e117332732b197725021b18a00a247ece5ea06fc1d2a44ae377fd1a82f18355947fbbebc9035c8fa5552b19b28b1e8ba17eace110c2f03a013dd373ba4
SSDEEP

24576:QauTU1reWBhZfQD9fEnuIVsFYbxeUu9KBZH5sTN:trsFYbxeUu9KBHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
447e5ac6fc298442df17fa4e86314985_JaffaCakes118

Files

447e5ac6fc298442df17fa4e86314985_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Tarakhan\Documents\Visual Studio 2010\Projects\엔티봇길잡이_26\엔티봇길잡이\엔티봇길잡이_캐릭터이니_AutoMove\obj\Debug\엔티봇길잡이_캐릭터이니_AutoMove.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ