5ec6cd182249a9a2b437c9d05420090a_JaffaCakes118 | Triage

Sharing

General

Target

5ec6cd182249a9a2b437c9d05420090a_JaffaCakes118
Size

30KB
MD5

5ec6cd182249a9a2b437c9d05420090a
SHA1

efb55d3be320a2f1ba055d4fa3fd80f69a8529b7
SHA256

db626437747085cb63ebc612f1a1bea6b674c4a20b0b10cc872adb268cd51cdd
SHA512

e56ed9f1054b7068a1d4866f9bb4d5291d5f4a0cef99561f751f79fe0d21f591caba6b07fdb419d98d77d24d14f49a91d07a67889baf5451c9bf67d07d9c7cf7
SSDEEP

384:DbYNXZmy6zNUvXhhBaaV0N8SccrQ7P2+h8J9T4KhJU/VqlxvGgFZ69kf5XGGd5k0:nYoy6vYcrQCw8z4KhFJ5kWccE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ec6cd182249a9a2b437c9d05420090a_JaffaCakes118

Files

5ec6cd182249a9a2b437c9d05420090a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\_work\APD-Rochester\trunk\projects\Tigris\SocialWebPortal\Mi.Sno.Tigris.SocialWebPortal\obj\Debug\Mi.Sno.Tigris.SocialWebPortal.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ