46a7208b9ae4d539cf7052b80afac48a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46a7208b9ae4d539cf7052b80afac48a_JaffaCakes118
Size

23KB
MD5

46a7208b9ae4d539cf7052b80afac48a
SHA1

f92080870f64ae593e4e7f05395d263e5c0bab4d
SHA256

82716e5438b75f000357517c4d6601adaab535d33d8d57c61ca1d0f5c7bc5c7c
SHA512

cbcd18e921ac566886515cebfdc6e1d9d0eec725eeca5565ca1b8ffa10d1eba715e87277af29137ef1960040b9158a4da3f0ae3aa279eba6b829ceec07bcede1
SSDEEP

384:5URiZ+DCaFgiSOucP8f5Ra73ep5I22hHasQLoPGeAfyypwsRoKYIijcg9ZW2vbcU:eRiZwgiSOucu+3epls7GeMyypwsRThiz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a7208b9ae4d539cf7052b80afac48a_JaffaCakes118

Files

46a7208b9ae4d539cf7052b80afac48a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\GoogleCode\SambaPOS\Samba.Modules.DashboardModule\obj\Release\Samba.Modules.DashboardModule.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ