bc3211f130619b1050d967a6b6b0fca7_JaffaCakes118 | Triage

Sharing

General

Target

bc3211f130619b1050d967a6b6b0fca7_JaffaCakes118
Size

15KB
MD5

bc3211f130619b1050d967a6b6b0fca7
SHA1

788c4bf2632c9c90859afaa9038ba07101a5e2cd
SHA256

294cb54841c90ac436f9e5e377257afa56e815485a87f3a19b13b1a04683a1f3
SHA512

02dbbc87b74497490302032bd0f6c4d9ec21efb3428cce6c8aefea701ed4392cfbfc421bd41d9db000f566f7f912d6362bdea91ab9e59874fb78875c1ebb585c
SSDEEP

192:0BnIbOtrfWqxkdbtSFlnst+lF7ktiiolZsCXVawjsXsXXFIQuQtIso3C/hj7Q8q0:qe0eSFNstqFiXCXVaSVXXiL0S8q3WH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc3211f130619b1050d967a6b6b0fca7_JaffaCakes118

Files

bc3211f130619b1050d967a6b6b0fca7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\DevStuff\OpenSpace\OpenSpaceGUI\DFNotifications\obj\Debug\DFNotifications.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ