17a609854d01ad89bd2ace331239cbc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a609854d01ad89bd2ace331239cbc0_JaffaCakes118
Size

24KB
MD5

17a609854d01ad89bd2ace331239cbc0
SHA1

fe5e669c0070ae047a99359c438fe6e9863cc38e
SHA256

36e76a23e8c6deae5f04e90808128dec189eda942c2c06a7f3b67ec01d2cd0ce
SHA512

253581da1c838c9387c00968885d4c6a187884bd6b1d906e36d2705dd14142dfbc107e04bd2814e80aeb8ee4057fdc3fd4d58867b3431c962df3e5279f3f6495
SSDEEP

192:G5xu4Fi8FZWtVE7JLQ9+NHPUfOL2GjZZAltPGlHGSQjb:UxujdtVoJM9GTCGtOltPgZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a609854d01ad89bd2ace331239cbc0_JaffaCakes118

Files

17a609854d01ad89bd2ace331239cbc0_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\f2bc0b0b\d13a0304\App_Web_pagetop.ascx.639c3968.qbfb1u4k.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ