2a51d14d204b470f33df506420d744a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a51d14d204b470f33df506420d744a2_JaffaCakes118
Size

24KB
MD5

2a51d14d204b470f33df506420d744a2
SHA1

0be5ce9039fd3f1421417da08c681dee683a227b
SHA256

6038cb3f9e9b04b033396b75db99241ca1594e7da560ad811f73e4140733e125
SHA512

9511520ec2a5d557ed22a0035cdd4e9512e5e20af34f794ece581dea8cc5738cdc22e4a5367d39ecc8a1eb2982a97af5e8c70bd302d2fdd2d6448c4b6c91266d
SSDEEP

192:VQmaRTEXqMZch2bGjORZiJBWNBcu91ZX3pweeUVpOe/ioVj01z1VSeCBi3ucshZr:V8RkKH601zDSeOi+cqZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a51d14d204b470f33df506420d744a2_JaffaCakes118

Files

2a51d14d204b470f33df506420d744a2_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

t:\temp\Temporary ASP.NET Files\root\04edee33\25370c23\App_Web_wy2rgzcj.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ