e1c78a5903773c57cacace09e005a55e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1c78a5903773c57cacace09e005a55e_JaffaCakes118
Size

18KB
MD5

e1c78a5903773c57cacace09e005a55e
SHA1

f8eb88d4978f954e143ca52ede43bb62d0949b50
SHA256

070d5cfebca39f5c5854787e470c708be2e14e510f560d8572676fcd1990d7ae
SHA512

a1ff1b4d3dbec51ca8489ddb6e198acfb45c856753142781ce7b82dd8aa1a628922a0f58d160b19d2244c92b48a0f21bfe593fc4d09674b4eaff0954c9716cfb
SSDEEP

384:tuccsJS3dB41smSq9rFkjI9ifgbLu/ip:YsJSnOsSrFkjcETK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1c78a5903773c57cacace09e005a55e_JaffaCakes118

Files

e1c78a5903773c57cacace09e005a55e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\ManagedWorkplace\Trunk\Common\LPI.Automation\obj\Release\LPI.Automation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ