e11bd1a425f3ebb8011669323904c05f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e11bd1a425f3ebb8011669323904c05f_JaffaCakes118
Size

7KB
MD5

e11bd1a425f3ebb8011669323904c05f
SHA1

098d7e717e298700ead7cb12f1bb97a140ae3304
SHA256

6c3ebac6ad3f2bcb27a4fdb95b5383877a89125e82c9bdc511c663ed1a5d8c61
SHA512

fb68d8df04f167ff16ab62991491c6a0822631a25693f018b91ef16e70729f1915804b5f2007de26501633b5149f2a4257f664893881761becbe1af977209c44
SSDEEP

96:4IjrFE44D9D/sNvmnKRUHdcRbDW/j2QVef+P+zQcMIUS9Z:40FQZD+byKQVef+PuQcMIUSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e11bd1a425f3ebb8011669323904c05f_JaffaCakes118

Files

e11bd1a425f3ebb8011669323904c05f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\development\petroskills\Application Suite 2.0\services\on-hold\OnHold\obj\Debug\OnHold.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ