a96fe8b48c0771489a33ca3b501718f7_JaffaCakes118 | Triage

Sharing

General

Target

a96fe8b48c0771489a33ca3b501718f7_JaffaCakes118
Size

9KB
MD5

a96fe8b48c0771489a33ca3b501718f7
SHA1

c161121a56ce6059f74ecca681430c1be73ff8cb
SHA256

a7cb9455fb0f130403b85c4afe400bd1d2e07914f7dc73f06216a37c9ec4da77
SHA512

43db7090408273b1a2427e234a3568941b11c16a7611b35aa8f0072eb6b3f935516a353af903304409df3032fccd26ce33bfb70a6dd701504403a59af56e438c
SSDEEP

192:ZAvnM96k9XoIIMu6W5E7kXdPJHKANLHzV:ZAvM96ucT5EQXDHKA9TV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a96fe8b48c0771489a33ca3b501718f7_JaffaCakes118

Files

a96fe8b48c0771489a33ca3b501718f7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\12.1\BuildLabel\Temp\NetStudio.v12.1.2005\DevExpress.Packages\DevExpress.Menu\DevExpress.Menu.Package\obj\Release\DevExpress.Menu.Package.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ