c7648b06d1ac94798c3f43c096af0e92_JaffaCakes118 | Triage

Sharing

General

Target

c7648b06d1ac94798c3f43c096af0e92_JaffaCakes118
Size

136KB
MD5

c7648b06d1ac94798c3f43c096af0e92
SHA1

19d8ac2238c5618f243cf1e80f3fbada487e9bfd
SHA256

85293c8e73cafab7d4284db48658279c271b82f0a844e22b375a042d3852cbea
SHA512

816edc024a8df19c5074a0c868cfbaeb2baadeca895510b36c57778c317e14467d14389e626178076407e27b59ee073a49ec02e6ad19f5558dbb12cc08d6b8d3
SSDEEP

3072:TfPkLYbeC3a2AR5yW+sEaEHTgueBlcAJ8kCrw:TfMLYfva2TguR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7648b06d1ac94798c3f43c096af0e92_JaffaCakes118

Files

c7648b06d1ac94798c3f43c096af0e92_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Basware\Customisations\Tools\OneaVeniceMonitor\ContempusInvoiceConnectorTools\obj\x86\Debug\ContempusInvoiceConnectorTools.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ