19a8fc79884ceb5dc92fe5fbe0e8e5be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19a8fc79884ceb5dc92fe5fbe0e8e5be_JaffaCakes118
Size

16KB
MD5

19a8fc79884ceb5dc92fe5fbe0e8e5be
SHA1

dee17e4aa4f4b3a26af95bbb7d0ce79ab3a374b1
SHA256

b47a4ae1b4a32d0c1a16aacb691504ace04305ca86789a1414e76f04b0259f0f
SHA512

377fa0a100cd9f95808bd79de716bb1d0746d74e449d3d532302c4ebe18566389a0347f31804a8b5fd0e37b82f3c9f4b2cdc68594eff8c35b23d398a06936f8a
SSDEEP

192:VajtgKZUo7tLWQqdJaNPtbpWjGeN20rn9LYU9OHAP4eUD8t3BoHUO7:VKZUSlWQ2QNPsIS9LYcA6iFHv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19a8fc79884ceb5dc92fe5fbe0e8e5be_JaffaCakes118

Files

19a8fc79884ceb5dc92fe5fbe0e8e5be_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\5311cb86\b8cbb0fa\App_Web_urvjcmjf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ