0c5f83de9dabd4f6bc3c9122d1255d38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c5f83de9dabd4f6bc3c9122d1255d38_JaffaCakes118
Size

298KB
MD5

0c5f83de9dabd4f6bc3c9122d1255d38
SHA1

28567f2f0f118f362af5e8584c1215d7861b6c89
SHA256

a5b9fd4be59744908e3c813c413f8bb9443ea9ed61d33743b5850ca36a738c82
SHA512

169440d454252bfa3aa0ff0115f93797302a6e865b36103236ead424c8790963d964c2dff2c9e7242e58bf651cad488700cc9d3cef21da0877ba5187bbff52dd
SSDEEP

6144:g50YQujbN3KAmQWT1oxZFqUssPMoMqNJ8mUjy8gSkDvIa:BY/bNFmZT1otqJsPEc8mUYZDH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5f83de9dabd4f6bc3c9122d1255d38_JaffaCakes118

Files

0c5f83de9dabd4f6bc3c9122d1255d38_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\Owner\My Documents\Visual Studio 2005\Projects\VBCrypt\VBCrypt\obj\Debug\VBCrypt.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ