42c20e38651e15fb28a18ce263b113fb_JaffaCakes118 | Triage

Sharing

General

Target

42c20e38651e15fb28a18ce263b113fb_JaffaCakes118
Size

44KB
MD5

42c20e38651e15fb28a18ce263b113fb
SHA1

bb660a730bb1ee7b8123b9b05f4cc83e42c01664
SHA256

6709be34053488bcc551a5e105ad75b94c2fc883801bc3b8f531a9b3702e4bb0
SHA512

9fe1c7d0bed25e2af081ede28c5ab4c5c608f5a60c6e7408c786ab4fa877e01a7354f7851642161734bc2cacdb9d442d19db3499684bc1778af46b2bbf968722
SSDEEP

768:EsAFIAfFJO1f+EpTtkZQL2T/ELJ9j16MzBsz7cusKekYus/e:WTJObTkZNE9V1j2vmkYde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42c20e38651e15fb28a18ce263b113fb_JaffaCakes118

Files

42c20e38651e15fb28a18ce263b113fb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\Administrator\Desktop\ImageComboBox\ImageComboBox\obj\Debug\ImageComboBox.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ