fbb43ae306243bc9141ced50530f481c_JaffaCakes118 | Triage

Sharing

General

Target

fbb43ae306243bc9141ced50530f481c_JaffaCakes118
Size

13KB
MD5

fbb43ae306243bc9141ced50530f481c
SHA1

7aa4b19f8f162bf12790b1e7927ce29b7e0857ac
SHA256

121477d72e198a9fdd88922c7a595434e2e506fde9f2a5914492281db548620c
SHA512

5ddeda25ca03419a2979398fe74aefed694c849512a82ebff7738f2521d2a373886995f9b179cca0d90825bd170f5d41553f15eea88efb4a72c0d9c08f639f2f
SSDEEP

192:X9XNR9PwReikbad4tbGvtkQvTxa6aLU8TnelDafQVxHY0MG7:196eikVCvK2TxDL8TnyDuQA0F7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb43ae306243bc9141ced50530f481c_JaffaCakes118

Files

fbb43ae306243bc9141ced50530f481c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Sources\KioskLine\trunk\KioskCommon\Innova.RssReader\obj\x86\Debug\Innova.RssReader.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ