df3d57d407b47a9d5c273ee1864d3246_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df3d57d407b47a9d5c273ee1864d3246_JaffaCakes118
Size

201KB
MD5

df3d57d407b47a9d5c273ee1864d3246
SHA1

fcd83b63528fb4cbf623d1aa8d98a09b7ef95cc4
SHA256

a4fdf54bfc70cc802a96dfc982a431701ed264904279c0b2d7ee883047d1a6d2
SHA512

c66485f47160505364739175bd7c793d898e372e61ec0395fd136deb5858d4e8ef445f8e66dd332018b05ab73bb7925b7c7d0ac49627f73490b31bd6ad1f3045
SSDEEP

3072:/jGKRhsRaYAZ+w3+94aLWyBbcUMyaiM3IztVK8RYhbCwSPCoA1nhl4V8c846JjBP:LGKh/3qTLjpVKuYhCrPQ1hG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df3d57d407b47a9d5c273ee1864d3246_JaffaCakes118

Files

df3d57d407b47a9d5c273ee1864d3246_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\ReportingEnhancements\Code\Studyserve.Web\Plugins\Qualifications\obj\Debug\Studyserve.Qualifications.Web.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ