a54da9a3727458c84745b1327fcf02c2_JaffaCakes118 | Triage

Sharing

General

Target

a54da9a3727458c84745b1327fcf02c2_JaffaCakes118
Size

272KB
MD5

a54da9a3727458c84745b1327fcf02c2
SHA1

0408c8456b45dbaaeaebe481e3238a2706a0d0cd
SHA256

427e279f03203a874b6f694c768f8c6148b34ba273365c0138fef4bb6d80d097
SHA512

6ca6bcab456ea3036c1510f8a04156ee668d764cb099124bb50f656c7a84f8eeb70b7bf0f2cad46a496a8bc53762edb0315e4f9dbeeca0ba7eb3bcc7eb0b693b
SSDEEP

3072:Hy9wvNrt90/i7ZeUl2sHz0mvFzAV7eZRLN+1EsOp8zlY4hdGmP2ZfLuNtRuV6NrR:D0/i92sHz0FVYLN+1vjlZ9NtRuV63QV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a54da9a3727458c84745b1327fcf02c2_JaffaCakes118

Files

a54da9a3727458c84745b1327fcf02c2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Buildserver\Perforce\depot\Common\Articulate.SwfGen\4.0\src\Articulate.SwfSource\obj\x86\Debug\Articulate.SwfSource.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ