83bc67fc6981aabc0e608f83ddcbca38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83bc67fc6981aabc0e608f83ddcbca38_JaffaCakes118
Size

52KB
MD5

83bc67fc6981aabc0e608f83ddcbca38
SHA1

447c5cedfba0a2a53240d8d01c93e909b8d534fe
SHA256

c2e3f3b0013ae23e2d37607fd31275f98bc41bb198523199bb540df44ba3ee41
SHA512

dd0f8ce3a7cdf11dfa41815700a3cc3f82a7fea32a5ffefe0a03f9de696d38364a205a5ed6ef324ee1a49faf09f4601248e501dafeb4d3e8e1d73107b385c3ca
SSDEEP

768:3fBqJx7W8Jx5F2W1l7jIF3ye8MD5wQ/UZOMqTCdbta2HBNP1J7mG:voJxSgxeWvXIF3byn/aYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83bc67fc6981aabc0e608f83ddcbca38_JaffaCakes118

Files

83bc67fc6981aabc0e608f83ddcbca38_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\Source\NBS\Common\RC\Netsis.Core.Invoice.POPS\obj\Release\Netsis.Core.Invoice.POPS.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ