0ccb3bfcdd9be61ba8fbe111a66b76a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ccb3bfcdd9be61ba8fbe111a66b76a3_JaffaCakes118
Size

64KB
MD5

0ccb3bfcdd9be61ba8fbe111a66b76a3
SHA1

8a6a11ee7c3b67216e92af4adec77648a1972273
SHA256

2f55de839a7916d1d625f5b2b6a344d89c91ea2fe7f9056cb6b4f28717cb47ca
SHA512

c7d1346f7c9fd9ef8662ec73cf79d86f1d40d55ab28f4bcf6cfb7029557dfe9800d603bd2aaa4b3bb9a0eccf205b7a065ef5eb4ca133978e3d72f227a5c10434
SSDEEP

384:9NBUyP7mR1CBfVy+7/BGea/v6DYmrUa3DBWROLeolYJg/izIoKIViIwTMX:LBzP7m875GeaX6zNWILpbizI+ViTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ccb3bfcdd9be61ba8fbe111a66b76a3_JaffaCakes118

Files

0ccb3bfcdd9be61ba8fbe111a66b76a3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\USER\AppData\Local\Temp\Temporary ASP.NET Files\root\da9a0e70\357bf82a\App_Web_bfprftvc.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ