1764ae04aa075dea0358dd83da5effb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1764ae04aa075dea0358dd83da5effb2_JaffaCakes118
Size

4KB
MD5

1764ae04aa075dea0358dd83da5effb2
SHA1

0669369b9b507711be1360f5df1cd94a6002f972
SHA256

5203fd3499932a07e52d351bd58d03bbd84a3d82390ae4cef4e8050263bc3b60
SHA512

cb509f0939e4c6f1fdd9a5bdcaa4bb195fd74743b5bc60b1acea59858d48cd64f1d284b788c8c7cfe5370e585416a52b918e294468cd6f5b5550b2b82ac55464
SSDEEP

48:6Wsn5OOOpBbGfWdPN1lZDoT8t13TsbnyhNcuJUk/3gpNhTMJCG0Nul/fRKOfqq:V9t1ljdsTyhL/QvVeflRK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1764ae04aa075dea0358dd83da5effb2_JaffaCakes118

Files

1764ae04aa075dea0358dd83da5effb2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\portal\1867251a\5b1d9c99\App_Web_southern-sun-garden-court-umhlanga-package-special.aspx.31017b22.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ