666de3ea907e6491485e9a7c332152b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

666de3ea907e6491485e9a7c332152b9_JaffaCakes118
Size

9KB
MD5

666de3ea907e6491485e9a7c332152b9
SHA1

d88fed5dc31e23a30e90dabc5ce1b5afba422093
SHA256

8e43cc71b6f0404b2dbda94e2a363ee114b0c852438af63a5195eb6d86e52c65
SHA512

88e5c82a35337eb57ca3671cee3e6b5b3fd2aeea15bee5325f8459a78b7ba4bea8673d100cd894481c7d82aca349e0108028a532f5841a9d5665eee903810776
SSDEEP

192:VrNNcnOnIV0pkqmRa0ik868pctP9M4hhMPk8Wl:VMJV0Cqmg0izcV9dDCWl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666de3ea907e6491485e9a7c332152b9_JaffaCakes118

Files

666de3ea907e6491485e9a7c332152b9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\Trunk\Code\Studyserve.Saml.Tests\obj\Debug\Studyserve.Saml.Tests.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ