1991ee2fc53480342796bd4f65631be1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1991ee2fc53480342796bd4f65631be1_JaffaCakes118
Size

18KB
MD5

1991ee2fc53480342796bd4f65631be1
SHA1

16ba104552f61a23baca38f5a645f878afb080ea
SHA256

b8b467a11dfa80311eba27d4814fe6166d7651644efa6fc60bc03f93563fc254
SHA512

95d2f4a8bb446dbd0351e7a9651a5e7735cb9771b096cd03c52a8e06e2e4951c8bcb5b530b0ca5b9e42831cde6c67354131d1fe935faeebad03e0eb0b4c5c3c2
SSDEEP

384:09TubDG085kP57NxWIeJmUsatxNAF7Rm:kt0BPsIsjT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1991ee2fc53480342796bd4f65631be1_JaffaCakes118

Files

1991ee2fc53480342796bd4f65631be1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Carol Megan Broad\AppData\Local\Temp\Temporary ASP.NET Files\quickstart\0159c834\7b263280\App_Web_tiswvqnl.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ