65084517721f50e16bd0f6e3d56cb7d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65084517721f50e16bd0f6e3d56cb7d6_JaffaCakes118
Size

26KB
MD5

65084517721f50e16bd0f6e3d56cb7d6
SHA1

77ab8b6b426fe28a31ee6bde3e2bf7e389b951e7
SHA256

e88f0edaf6a961fe8ffbf3c2ccf578de751d8b741f035c9783899728dbb7d2ca
SHA512

9f8209e140a847483742c4987fb11ba948016586abae82a64a746e9296d9da3bbe1bcb27f03e1f01ca139d4df586dc2348458abc3bdc356bedf14f964997990e
SSDEEP

384:LMYfMiPL93vZZTeoOYM8YZRumH6npw4Vw8RvTuM1D9azshCU9Psg3IARWa:LEijBvfTeavgVHgpw+ZLAIhD3IA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65084517721f50e16bd0f6e3d56cb7d6_JaffaCakes118

Files

65084517721f50e16bd0f6e3d56cb7d6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\8x\trunk\net\fast8x-core\fast8x-common\obj\Debug\fast8x-common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ