d133c8d9ea090b2536158dbe0f985c68_JaffaCakes118 | Triage

Sharing

General

Target

d133c8d9ea090b2536158dbe0f985c68_JaffaCakes118
Size

142KB
MD5

d133c8d9ea090b2536158dbe0f985c68
SHA1

4dda9ca661f60af362b946fc2ccd7dab20eb2a4d
SHA256

600258993bf14225f53fc52a764360b7a31b16ad4f66e0a5037e84f5c0cab1c6
SHA512

6636ba5f8e0ece8a8b6c2f8db9fb89243d19e2392a8e91a1298ab69d37ecd42614c084ac033906650d2876007a4170e2525d1f526aa246f1ed69a910d27f56a1
SSDEEP

3072:sXAkIzsNBmCEjvTo3ztBhVzqo3z/wc+7AZdux:sSz3MRBfz1/U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d133c8d9ea090b2536158dbe0f985c68_JaffaCakes118

Files

d133c8d9ea090b2536158dbe0f985c68_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Alan\Documents\Visual Studio 2010\Projects\Magnet\ExternalSalesAgency\ThirdParty\WestWindWebToolkit\Westwind.Utilities\obj\Debug\Westwind.Utilities.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ