d65eb62e727f7fb512e13c32fbc4f9d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d65eb62e727f7fb512e13c32fbc4f9d2_JaffaCakes118
Size

69KB
MD5

d65eb62e727f7fb512e13c32fbc4f9d2
SHA1

8256b05e31b9f8a66fcb70a4f13b1c84a4b4398e
SHA256

0de05113c93b6d14fab57d4166f060e4f4a60ab6d45846ecc1fcc4386062f0d8
SHA512

22e9d93b371e2a03678459b9f33541bc8b59c6b07b484f7cc3e6ac490a52be8816407afcc0ef455f1cab5632c8d4c3858e13e2e93a4f8886e1b67e220857659d
SSDEEP

1536:1hTjoervgG0OuC7gXQJIxXadVBmngykY52+:zT0oGO7cgJKaRgb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d65eb62e727f7fb512e13c32fbc4f9d2_JaffaCakes118

Files

d65eb62e727f7fb512e13c32fbc4f9d2_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\NewSVN\DataDivision\trunk\products\LogInterface\logclient-windows\Release\logclient.pdb

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ