0814c91123973011bb17ed092e962cd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0814c91123973011bb17ed092e962cd6_JaffaCakes118
Size

176KB
MD5

0814c91123973011bb17ed092e962cd6
SHA1

c40f4bc1199040390d554616e1e7653309132c20
SHA256

7a5c6dbc893093ba7026776bfef90cfcf78b8df222cfb938dd6aa228048d819e
SHA512

1a93cdb423a5c5577da9b3074022632825957971262ef640821506169af54a026bb0bb2d0f3ff0ffcf295ec1d83703720f582c4b1ddf5b6eab7ccbf4c8aeb0f7
SSDEEP

3072:F8P7GgGLedxqfszksODj8jZpwH/U9nvSUAmol7h0K3sb8LWk4VQb+8IrgeDPU1V7:q7GipkU9n+J5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0814c91123973011bb17ed092e962cd6_JaffaCakes118

Files

0814c91123973011bb17ed092e962cd6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\ustipmedikal\4940a571\75f15918\App_Web_2g3wutyj.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ