d17554b6ea7329bb7667559474db5b84_JaffaCakes118 | Triage

Sharing

General

Target

d17554b6ea7329bb7667559474db5b84_JaffaCakes118
Size

60KB
MD5

d17554b6ea7329bb7667559474db5b84
SHA1

e269f2c7ecc2fcbc3a19831397519abd33eaa735
SHA256

599d9f1f034280a98211ccf1661d92a3dab923cd2623329e5582d9ddb57723a4
SHA512

e995d9a82c55613b924bd0ae3d7e5a8fc3d860e0059cb3bb9fb55301d247f0f7568d389129f9b28d096831f2ee07391af67b43f3058799a278dbb1e4dddc4131
SSDEEP

768:R1baF5oPmoT6fTTvOZhV+EaO6GBNl/lswXnKht2uZJdDPXVbjgILxiLj0hHK/r:jbaF5lOEujlswXncgcLxiLPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d17554b6ea7329bb7667559474db5b84_JaffaCakes118

Files

d17554b6ea7329bb7667559474db5b84_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Bertrand\Projets\banshee\src\Backends\Banshee.Windows\obj\Windows\Banshee.Windows.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ