66eb3af996c6385f35d38106b9acc2ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66eb3af996c6385f35d38106b9acc2ca_JaffaCakes118
Size

997KB
MD5

66eb3af996c6385f35d38106b9acc2ca
SHA1

7dcf688a351aa684cb7ff1a35b97325dbdc19f2d
SHA256

3bafe22278c73e07303eb79c30d7f1889dd5048f1d11e3a167c830bd21fe960a
SHA512

bdeac05cbec38114ac3b4246767f5e14aa1b9da0c7307af03b0e8979253062aab25dff28ae7268a7ee74fb18cc2416762d58357a21d4bf2afaecee1d7ccff016
SSDEEP

12288:mu2V3GOzI6GsESrz0QMcT6YsHXpY96Fd3k4Xswm8xASX/o8eyDux:mjtp5oQMcWYsm96FdUYm8xAE/e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66eb3af996c6385f35d38106b9acc2ca_JaffaCakes118

Files

66eb3af996c6385f35d38106b9acc2ca_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Metro.PlayerFramework.Xaml.ni.pdb
c:\Users\timg\Desktop\Microsoft.PlayerFramework\Source\Trunk\Metro.Xaml\obj\Release\Microsoft.Metro.PlayerFramework.Xaml.pdb

Sections

.data
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 762KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ