65e9fdcbdf8403111868727ed1db575e_JaffaCakes118 | Triage

Sharing

General

Target

65e9fdcbdf8403111868727ed1db575e_JaffaCakes118
Size

255KB
MD5

65e9fdcbdf8403111868727ed1db575e
SHA1

0f4c98ef49451d9300a3edd4987d66a821b1f15a
SHA256

8711a68798cbf3ee20edcdf20de86ab28993cef3fa75e4e92d4bdab848734681
SHA512

5266903629cdaa24af192c0f8a400a60e95a66de2899a1cc89deb85e6c918b45928832fd8f0b897042f8aee3c5a6b0d50a30bbe677990d083bd96beac5118500
SSDEEP

6144:McfCoGzkOEaFlzjohXRCi8+kpFZ1zlcW6t5:McfHGzVJFlzjohXvnq1zlcW6t5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e9fdcbdf8403111868727ed1db575e_JaffaCakes118

Files

65e9fdcbdf8403111868727ed1db575e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\projects\MI\Code\Studyserve.DataImport\obj\Debug\Studyserve.DataImport.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ