5da860acf19906a6bae812d7c0ad3b0a_JaffaCakes118 | Triage

Sharing

General

Target

5da860acf19906a6bae812d7c0ad3b0a_JaffaCakes118
Size

92KB
MD5

5da860acf19906a6bae812d7c0ad3b0a
SHA1

b9bc8fbdc4110ac3c784953602a531f8e6f874ef
SHA256

6d06d8d10c38d6bfbfef51898e632bf9aa43a547b72f76cc9903cb14bda49a01
SHA512

ea552fa1aa917bc4dfc7ecf4ed4e3cf55c926929c87fba67a82d51f29f58ce265b3132bbb71e6420ad389a2cd793bba83c5aaa833d8851b7e477b9abff89b02a
SSDEEP

1536:FbTT9hChBerNsnDRdmmTOoLB0vyU/P2Wzk3sNbSh6QELvIhg9WzDRV:LQhBIsDRdsNBwhg9WfP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5da860acf19906a6bae812d7c0ad3b0a_JaffaCakes118

Files

5da860acf19906a6bae812d7c0ad3b0a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\colorado\ccr\new\win32\src\ccr\prod\Client.NET\C1PrintAble\obj\Debug\C1.Win.C1FlexGridPrintable.2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ