dd0c21ce54c4c13cbf5355702489d3dd_JaffaCakes118 | Triage

Sharing

General

Target

dd0c21ce54c4c13cbf5355702489d3dd_JaffaCakes118
Size

6KB
MD5

dd0c21ce54c4c13cbf5355702489d3dd
SHA1

f8a30378feff5ac33d47239427a637e3b44b4934
SHA256

a475bfe2dc625a2f48fa41bf1e21af35583596da339f98f37cc5704b62b9e2f0
SHA512

c5131fbd4cc1f2e2e4a84f4e6e414bd50a847d1b7a39f687534bfd578e1d7f63e9cc942eaa0c5962a67a585717800d9c99dfd4d5a71adf8a97d4600f873c06dd
SSDEEP

96:suFv7vZlZx2LgLkRy01N+Ogne3fMyu5eTjeIZgKeiPW/mYaYlF:DDZlZx2M+NhgDy0ije0gXiP7YaYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd0c21ce54c4c13cbf5355702489d3dd_JaffaCakes118

Files

dd0c21ce54c4c13cbf5355702489d3dd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\workarea\8.911.4.1\apps\ccc2\Source\Foundations\AEM\AEM.Plugin.WinMessages.Shared\obj\Release\AEM.Plugin.WinMessages.Shared.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ