b0dbbb61ca8280223e96734ea5297b51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0dbbb61ca8280223e96734ea5297b51_JaffaCakes118
Size

109KB
MD5

b0dbbb61ca8280223e96734ea5297b51
SHA1

cf2f642f7a4c0223843ef75a196693462ade12a4
SHA256

2d482a8be97fbb899c2b19f1dc40ba14b72cc3bf8343fc9ea4ac59a97f0cf099
SHA512

b6605c788dbea45499c2cbf803ff4428aa1bca9cc5cadd658c1e52fc74edc7d82cbe09bfcf9de5d8a1caa23c40494222dd038fef49de7de4265d51819b1cb9e0
SSDEEP

1536:aUN40wLG95O5Fv0OLQlblS7oiKPuW47MmXiz9H170iiahAbPj4VbGz/oe5DmMM:aGW1FZBLihhAX45GzQQiMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0dbbb61ca8280223e96734ea5297b51_JaffaCakes118

Files

b0dbbb61ca8280223e96734ea5297b51_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\dd\vsproject\xmake\XMakeConversion\objr\i386\Microsoft.Build.Conversion.v3.5.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ