2a5b5e5b53a6f65398d484bd01bf7a5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a5b5e5b53a6f65398d484bd01bf7a5b_JaffaCakes118
Size

9KB
MD5

2a5b5e5b53a6f65398d484bd01bf7a5b
SHA1

fb12873229a7744183b49e63133aff8a71799380
SHA256

4d2bb305f6cfd6925e5d7ad929704cbff4425242290c46c474921d98c795a908
SHA512

655d72502ecb763f905f10ed26d899dd72267b586522bf133609a5862b301a37984d54c51644ecf52094c74380e007f215487322a1a1c4b2ce2f2153e22cb3e8
SSDEEP

192:lylUY7RafbL5nK4Jp8t9VUCsh6EmtNIXyN53u:UNGf5K4L8iCq6ltIS53u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a5b5e5b53a6f65398d484bd01bf7a5b_JaffaCakes118

Files

2a5b5e5b53a6f65398d484bd01bf7a5b_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\soma\65344c74\b64dc2eb\App_Web_vmasterpage.master.f9b0821e.4xfu-aqq.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ