8d01b473737164eb5d8378def689a8c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d01b473737164eb5d8378def689a8c4_JaffaCakes118
Size

8KB
MD5

8d01b473737164eb5d8378def689a8c4
SHA1

bff0ceb20667fbfde90d04dd3cfc4ab116534e6f
SHA256

71ff84e2c68488ae1925ecebfaa923d53a44e0b8b0467b6ef65d5cd1c4b2b95c
SHA512

33c9890009ec9bc8b6bbf788f59f91bbadf07f19d132658426274754e07903622cc27fd77b5317ac51b9561a221df19229ebf15a3dd85168f8ad42dafb06ff71
SSDEEP

192:GKBqgt6aj1IvLYbYh8kYpcFWXwpZX6yGljffYV:TBB6MIvyzkOcXe7j4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d01b473737164eb5d8378def689a8c4_JaffaCakes118

Files

8d01b473737164eb5d8378def689a8c4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\development\petroskills\Application Suite 2.0\services\follow-up\FollowUp\obj\Debug\FollowUp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ