d5cfe6d7e2eaa3bd7077a117c5896389_JaffaCakes118 | Triage

Sharing

General

Target

d5cfe6d7e2eaa3bd7077a117c5896389_JaffaCakes118
Size

250KB
MD5

d5cfe6d7e2eaa3bd7077a117c5896389
SHA1

d9549bc8ecfb47fa2cd31318054eabe4e90f6119
SHA256

9b2aaa9b16e47ea90aef273c2f68a1bd2ec319fca86e3522d40536c4b6c0b48d
SHA512

71c6a6406131c17cff86caa4769a36f3bf77ac338e015e066a70f6f5c42af7d447f78320cb2e724737852c7aa96460ad8874cc80f3de600e53f12870719a4811
SSDEEP

3072:ZJxQq4eyEwwTEbK3lLZQw1Q5SgtuqaqTjER9PPfIx/ZFH/kaqahHEw8wZ1drz/m2:nxQq47q3K/1KfS//H/T/drLm8Nuq2I1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5cfe6d7e2eaa3bd7077a117c5896389_JaffaCakes118

Files

d5cfe6d7e2eaa3bd7077a117c5896389_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\c_temp\svn_src\Kona\TesterInterfaceBase\obj\Release\TesterInterfaceBase.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ