75c1483c0451799b787b279c48407e60_JaffaCakes118 | Triage

Sharing

General

Target

75c1483c0451799b787b279c48407e60_JaffaCakes118
Size

36KB
MD5

75c1483c0451799b787b279c48407e60
SHA1

59903837fa7d7aa9f8dbb1e8e579e0e889eea4b7
SHA256

819a27813c4ecae0a7da3fb2693ad45531d4dd35554bab2cfd9897fadf0b32a7
SHA512

d7fe494d1bb146c7682de554d62ae400be9f2b44c9f69bff953bab7d01bdd11c99931438fbf3c7cee8e49212a71da3f89b8e1ceacd9e5593b8b6878c66ec0863
SSDEEP

384:t1aYvD3dsoe9mCftAwo2QFVU8gQPqlwTnV3I0bm5:t1BD3dst9ztYFVU1QkwTnV3I0C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c1483c0451799b787b279c48407e60_JaffaCakes118

Files

75c1483c0451799b787b279c48407e60_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\My Projects\Configurator\v42\eCon.Shell\Infrastructure.Interface\obj\Debug\ECon.Shell.Infrastructure.Interfaces.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ