ff57c554b54b07e2b3511d906b380175_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff57c554b54b07e2b3511d906b380175_JaffaCakes118
Size

42KB
MD5

ff57c554b54b07e2b3511d906b380175
SHA1

f5dd79bb8f3f467f7678e5987876d19b9fcd6e60
SHA256

337ca8b764770f439bc93819e3cd9ee3dd126cfe70433f2884fac47b3294c83f
SHA512

3231977c49d9edff4ef7e899bef11201c582877647fdeb53f26990bbb9670a72c7f01239346c8a6fc29bf4f5b2f89c7ba386a410066363946ca76885cc2c2268
SSDEEP

768:3fcDn//RwiGtFfMgPFiUY1r+HqcW+ycwgfKmvjPF0gu7:3fGnR/8biUnsN75

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff57c554b54b07e2b3511d906b380175_JaffaCakes118

Files

ff57c554b54b07e2b3511d906b380175_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\Protocollo\SandBoxDotNet\2011\Acustica\IFC\IFC\CSG\obj\Debug\CSG.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ