188f1b026c4dc1ac63cfab2898cbd8f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

188f1b026c4dc1ac63cfab2898cbd8f0_JaffaCakes118
Size

9KB
MD5

188f1b026c4dc1ac63cfab2898cbd8f0
SHA1

531c68b6b409d7a93f5ca02de14600b9bf4732ce
SHA256

ec9eda83df10433e2fa43ba9ff6686d9139030c443377393133f4c046a5f469d
SHA512

a806cf9ce162ad1cccbe137843a5592764ec4b59c49e67c833f317546e786723d734529feeb5aebb8870a20a101298c7dab99422812df6b53702157504ed101c
SSDEEP

192:olfd670KeLBbgh0w49Jcs7tzXnhonC76uY+1+tPS8:SUcOShono6v2iS8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
188f1b026c4dc1ac63cfab2898cbd8f0_JaffaCakes118

Files

188f1b026c4dc1ac63cfab2898cbd8f0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\measomfreeradmin\root\38e2d529\ceec8fc2\App_Web_resultpanel.ascx.f1b43d4f.lo7bmdyh.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ