291eab8fb505efecbf087d387ad1b60f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291eab8fb505efecbf087d387ad1b60f_JaffaCakes118
Size

13KB
MD5

291eab8fb505efecbf087d387ad1b60f
SHA1

50234d4ee945b2d0872420542a691d575c2a3483
SHA256

7009703c31d0fc92f98b9d6dbef97c0636e5914b819029e37d3e5b47be12d3a6
SHA512

5028ce08068c246baa81bf04ca541f70fc3ff142252d3bd8d0febdb79f1b93901ea1f181284370a3772a09dc21a1d4dce8c5312e1643b6588b2fcfda541f1564
SSDEEP

384:EOxZTee9DL3gUBYGAvUTVTKidNGTUi8s4pLl:EOxjDLQUOgGgi8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291eab8fb505efecbf087d387ad1b60f_JaffaCakes118

Files

291eab8fb505efecbf087d387ad1b60f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\manage\0f4c3802\a942e645\App_Web_4m0g2spv.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ