18455df48bc163d803dd8afff1d61875_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18455df48bc163d803dd8afff1d61875_JaffaCakes118
Size

7KB
MD5

18455df48bc163d803dd8afff1d61875
SHA1

ff44d3f40e3343aef02a8b3018a66670550091e5
SHA256

4063b4b557f34d49a1269763c7d07b05ae7c15b6903fb39136399b7a7aa964fa
SHA512

151fef064d347e6a2bb821475fc2651c5524f5e4208d75a83efb662b2fce1bdb3d708c749cb34d4310d223993b1392ce3e01dad398631f63ac719f35a6fc9857
SSDEEP

96:0Og6FjotvvqNCSlhd9+dFK4GpXa/iyCxYtjY76EtxoawaKfdIpxam:L0rNdsppX0RCO6FxoawaK1Kxam

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18455df48bc163d803dd8afff1d61875_JaffaCakes118

Files

18455df48bc163d803dd8afff1d61875_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Nick\Desktop\Testing unitypackages\iapstores-1.9\iapstores-1.9\winrt\stubwinrt\obj\Release\winrt.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ