5c060a4ab95cac558067d062d9ea6970_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c060a4ab95cac558067d062d9ea6970_JaffaCakes118
Size

17KB
MD5

5c060a4ab95cac558067d062d9ea6970
SHA1

71188f68014c765e5ca76f270104a36fe01c4d4d
SHA256

5657e9f20aa485da1c960a6b40d66f3cc49ea73d96e40dc9bd4d9d55cbcfbe11
SHA512

17b7a91ad52b27a212d425b9a6c3d63a893e3581657d650d3d2ded92a742d14bda19bcc3ffa803f9b157115ad4ad4e41fc6ca64c03939d7464d0146dd57f9437
SSDEEP

384:oRB6uxaepHtFKGbH/eMPrZhsaoGdqL8L3wyHwtvM2Npa9X6WI:o36JAbHWErncgkM2Npa9XU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c060a4ab95cac558067d062d9ea6970_JaffaCakes118

Files

5c060a4ab95cac558067d062d9ea6970_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\TFSBuilds\5\BreezyConnector\Connector - ClickOnce Prod\Sources\Trunk\Breezy.Connector.Windows.Monitor\obj\Release\Breezy.Connector.Windows.Monitor.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ