5ad69fb6e43d662e0c0635aee904614c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ad69fb6e43d662e0c0635aee904614c_JaffaCakes118
Size

94KB
MD5

5ad69fb6e43d662e0c0635aee904614c
SHA1

c96961f1e31ffc09a631d2d6082b34416ec8f66c
SHA256

9c5893301708f2ebfe74bb29ffeb8cff365f5dfe0aa174131c51d6cf72f31ebe
SHA512

3277c973b2ff620d872936f3a238d3620d3c3bd277f0b73d9921e598337f20ce16cbf8b10ed3d56454f5984a4149fff4bc2c1f2b065d26df5618d313b2c84ccc
SSDEEP

1536:XdP0r7hN4J6BRPxW6aXAnCab7vJdf0dR+/tsmWrCof11V6m9U6UwSm7sv:XdPe7hKJ8PxW6aXAnCanvPv1sZrCof1c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ad69fb6e43d662e0c0635aee904614c_JaffaCakes118

Files

5ad69fb6e43d662e0c0635aee904614c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\Toolbox\2.31.XXX\Controls\RSTP\RSTP\obj\Release\Crestron.Toolbox.Controls.RSTP.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ