638082a5f7fd46b5d230800ba29993e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

638082a5f7fd46b5d230800ba29993e6_JaffaCakes118
Size

153KB
MD5

638082a5f7fd46b5d230800ba29993e6
SHA1

9d949a093a5bae0dcbfafd6f059a4acb3548b361
SHA256

d3d6217da42c63d2b3ea94f0d5b01634e73fb9ca02344f70714040d82e05f0c1
SHA512

13c5c10109138d04919803d2cd3d32fc3dc91890349948c0ac3ae0a696dfa06abea43ffdd66a360aadd4528d6c75bf8d69127011c99a2d5be9d73c001688d4ca
SSDEEP

3072:J0NUQrktDNGxhf99LpGWMFfOR2d/gGsVlJd7yJD9dN8WStpfQLvdBnawOI:zQrCDQd3MFfOIsZm9dN8WIQ/N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
638082a5f7fd46b5d230800ba29993e6_JaffaCakes118

Files

638082a5f7fd46b5d230800ba29993e6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Javier\Documents\Visual Studio 2013\Projects\Asdip Retain 4\Rebar\obj\Release\Rebar.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ