172be1e979681b88e76f630cdedcac86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

172be1e979681b88e76f630cdedcac86_JaffaCakes118
Size

33KB
MD5

172be1e979681b88e76f630cdedcac86
SHA1

437af16d5b51dfad7fa3e6f00b719f2327ee5e61
SHA256

b3aad0c8344fff6510cc2e0567d8a785a8310398428aefa85bea2ed6c304c224
SHA512

0d5b9ae0872362ae7949a4867bfd0826f0c82158a8a127d12ed6cbaa8b7d6377c3ea5b76b7b2aea01fa90d3c81cba9a8dbb0a7912c243e14fe29470688c21cf5
SSDEEP

768:3zS0FLSF5K4VRq1WL1HKq3EojcDxZQdu3foCbgIyChkExreFu:jr+k1WL1KbdZxreFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172be1e979681b88e76f630cdedcac86_JaffaCakes118

Files

172be1e979681b88e76f630cdedcac86_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\78306ada\514c69a5\App_Web_aquypwc2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ