23dcf529ac040d0f59d30078581f2269_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23dcf529ac040d0f59d30078581f2269_JaffaCakes118
Size

13KB
MD5

23dcf529ac040d0f59d30078581f2269
SHA1

4bd4050bbe76dd642ed1000b8c54122d3002a6ea
SHA256

5c83307452e67eea843905822ad0c7406285f77f3cca487330bce4f1c76d8834
SHA512

c840f70c3797d4386834c43848a2b51749d8c4c0bc528629d26321514bf409e6fe11353a6e862546f2454f51866d8c9cb510b42a9fc0dac1a966ef8e2abbb02e
SSDEEP

192:6tnYCmBwesVhooIxF7KFUPWNjQzOsWeHb8aKIltuNhW+ophpGUWF8AEP4fmDnm:6tSunNsWxelQNhRovpJAOgj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23dcf529ac040d0f59d30078581f2269_JaffaCakes118

Files

23dcf529ac040d0f59d30078581f2269_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\manage\4ef9f0b6\bf3bda2d\App_Web_c17tjipk.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ