4bf4de3df4f9b7ab6d9c6a6ed9cadbe4_JaffaCakes118 | Triage

Sharing

General

Target

4bf4de3df4f9b7ab6d9c6a6ed9cadbe4_JaffaCakes118
Size

55KB
MD5

4bf4de3df4f9b7ab6d9c6a6ed9cadbe4
SHA1

2aa710bbfcefff064c6a190ff9fb762321b91aae
SHA256

4f97091f86a6e945539448e4037b9bf6309ba036b95630319150d14966649fbc
SHA512

de8cb1df73cb4e3087cd06c8e8ab93853aa7f6bedcf89b896cd417230985c10c7bdffdc5670463af88e598d6a65d4c8a35cd8d883df82f8cdb71eb75d5339a2f
SSDEEP

768:HbVGGu+I1i74rzraYPCbM9rGHkuRQ7I0m9BIXAF35Pu5co:Ha+kPX6I0Y7r2BC6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf4de3df4f9b7ab6d9c6a6ed9cadbe4_JaffaCakes118

Files

4bf4de3df4f9b7ab6d9c6a6ed9cadbe4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\VideoServices\DragonFly.Video\DragonFly.Video.Branding\obj\Release\DragonFly.Video.Branding.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ