a3d401e542970d683ded8e44456b44b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3d401e542970d683ded8e44456b44b8_JaffaCakes118
Size

48KB
MD5

a3d401e542970d683ded8e44456b44b8
SHA1

7731b2039c74fc555e3066d39e1d528a65e9b835
SHA256

0be38bbb322ea166e094ea96ffee51539843a5441e27aefb1312dc735889cf20
SHA512

77283f207d805d9b7e879420ea0b86f75a44d57aa0f6dab1762c93ca2aa1df4cc7fca0b97de046947da19dbd166c4d1d65997115e70771f3a76b311bc9a7da43
SSDEEP

768:lCUiMBFXr1UXEXxOXkXXdD/e5ZHsupYtu87JXBgArD7axJlVn:lD1xrEZHsupYtu2JR/2T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3d401e542970d683ded8e44456b44b8_JaffaCakes118

Files

a3d401e542970d683ded8e44456b44b8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\My Projects\Enterprise Library\SCSF\Caching\Configuration\Design\obj\Debug\Microsoft.Practices.EnterpriseLibrary.Caching.Configuration.Design.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ