4ad73460cffefcb43763a7f863af2ad7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ad73460cffefcb43763a7f863af2ad7_JaffaCakes118
Size

17KB
MD5

4ad73460cffefcb43763a7f863af2ad7
SHA1

5ed468a613e026f3bfe80ad8544bf1340fcc11b5
SHA256

20ec0818120e902cddb5b4338b0d3b5fc0219bc2fedcb0af7ba56a1a10d0cb9b
SHA512

0418fadbc69a0f9d35e959e414bf4045902c8ae62b2cd5bc31583d1ba9d5f9e05727595d9e004991ce6cb767eaa6aa6210f971702aef9ecbdaf952c3ec38771d
SSDEEP

384:O8X72lBhKxzE1RmjJwaBulq/QLHT6tRkD:b0OJs2tRC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ad73460cffefcb43763a7f863af2ad7_JaffaCakes118

Files

4ad73460cffefcb43763a7f863af2ad7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BuildWorkingDirectory\src\ipmc-device-plugins\src\plugins\nics\jetDirect\src\IPsecPlugin\obj\Release\Moabdevice.SupportAssemblies.JetDirectPlugins.IPsecPlugin.Sv.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ