74dbeab769bb198f83d716791d65ba2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74dbeab769bb198f83d716791d65ba2b_JaffaCakes118
Size

48KB
MD5

74dbeab769bb198f83d716791d65ba2b
SHA1

ea177f4bd53de11929cc7eb3c80fdbee9a81b55e
SHA256

ad8a73e9f72b420f2148e2726343fcb3b1365f1de1bc318eee93959caada1688
SHA512

9ceb793ec6b41dbe9332c23b6b24b69c3e99ebae71fe585995d05f7e424bb25710588fcf0daaa42e9a6f4ee584aeeef2a4593679d5074205416cc59024a810be
SSDEEP

768:5Lnw2kHRuhF+wDmE0/rX2WZkUycQ7b2Jo:5LnwpRcADhxpo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74dbeab769bb198f83d716791d65ba2b_JaffaCakes118

Files

74dbeab769bb198f83d716791d65ba2b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Kitti_Job\Customer-Job\digital sig\web\DFTDS_EDIBackOffice2\Library\Controls\DotNetNuke.WebUtility\obj\Debug\DotNetNuke.WebUtility.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ