176a7d1d112bcb3257faec3e648ae3b0_JaffaCakes118 | Triage

Sharing

General

Target

176a7d1d112bcb3257faec3e648ae3b0_JaffaCakes118
Size

5KB
MD5

176a7d1d112bcb3257faec3e648ae3b0
SHA1

e3925b2177d1268130a03e81d74edad9afb7ba7f
SHA256

be0d04568e2e1951f9837f758a4ab1b342e194051331a38935beb49997b021e1
SHA512

c985ff3e4db24633b13eb056ec4b760f0df22c5c20a9f56b1a1081096d752a58ec44e99e65eab672325fac66d617a83e26a396c8ca75bb50937a3f231cf1ab20
SSDEEP

96:U+R/TOvDvTnkdMr19OoKOxogjXCi9avLTjTvClSsdj:P7OvLTkdMZ9q7AyNLTjGrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
176a7d1d112bcb3257faec3e648ae3b0_JaffaCakes118

Files

176a7d1d112bcb3257faec3e648ae3b0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\DeMoNi\documents\visual studio 2010\Projects\Criquie\Criquie\obj\Release\Zizi.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ