b417948d9304602c12e1f2aa62464d5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b417948d9304602c12e1f2aa62464d5e_JaffaCakes118
Size

52KB
MD5

b417948d9304602c12e1f2aa62464d5e
SHA1

bbaa31f0d4ec973e03c74fb8fda633a616a1e126
SHA256

0c23cb5b4298160f04a1a77845d14b068e5d58b81b9e347bbd6c254d33786b51
SHA512

50dddd7b6c787987f7b9779c112b41cb5ef822d455364e74516112b3efcd1eddc123451a9b77d346f244108acd810d0c3f56e7f974b6dca4380b11a38cdaa580
SSDEEP

768:MV99FcFvV+7sPJkZgtsON6RQQtToeb1+t7pIcHffe6mco3oKoteIC:MX9F5sPLN6BUlfe6mc8Potw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b417948d9304602c12e1f2aa62464d5e_JaffaCakes118

Files

b417948d9304602c12e1f2aa62464d5e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\e\2328\Sources\2012_40\Common\Src\Assistants\Lexware.Loge.StatuswechselWizard\obj\Release\Lexware.Loge.StatuswechselWizard.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ