fba04fb275d817d2c7abcbd12b1814f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba04fb275d817d2c7abcbd12b1814f3_JaffaCakes118
Size

33KB
MD5

fba04fb275d817d2c7abcbd12b1814f3
SHA1

135a2ef53c9fd7ec56317f1b29dc74960a40ebf9
SHA256

796ff0f069f9d2e86a3182ebb651ea2b5e62e5f14c8a66bbf8d64e718069483f
SHA512

9edbf995a4fa8082869c65c4c051081d6de349ced7bfe6c0eeb9c9a9ba46a8867b1505f76aed32d9952b54e712160fb1bc0156e00899c239a228714cc987db13
SSDEEP

384:ATgKbwJnLZuGUZwtjeyJ1Wga0n1aiIOLIGefC7zMfADTviXQCyB:JKKn9uileyJ9aStd7ECrUTS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fba04fb275d817d2c7abcbd12b1814f3_JaffaCakes118

Files

fba04fb275d817d2c7abcbd12b1814f3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\Studyserve.Net_Webinar\Code\Studyserve.Content\obj\Debug\Studyserve.Content.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ