ae45d6ca72d6cfd16f50912feb8d3711_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae45d6ca72d6cfd16f50912feb8d3711_JaffaCakes118
Size

48KB
MD5

ae45d6ca72d6cfd16f50912feb8d3711
SHA1

4113d8b21785e3b7ecbb94087bc608fbeda948ad
SHA256

243116994b37dbe8f76b8a0382c07e6fcf664be435b38b5da900927ebe2f68b0
SHA512

ab5fc3191220a115c1781eab43625ad4ffa23d965a588c73380fe953025bb1d1e501627d534d3321b14b5a9ba68384b5decf3e89e653f54e7d5e5ffc95b47a73
SSDEEP

384:2W0m50wahk50wsbG50wTt50wh2QKWsUoVd+50wG50wTKvBkderxl:2QxRpJsdfk60qerx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae45d6ca72d6cfd16f50912feb8d3711_JaffaCakes118

Files

ae45d6ca72d6cfd16f50912feb8d3711_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SXA58DBuild\Components\MedMgmt\KBA\SXA.KBA.UI.Resources\obj\Release\SXA.KBA.UI.Resources.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ