2c099289569327c431cbed731b2d2ffb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c099289569327c431cbed731b2d2ffb_JaffaCakes118
Size

24KB
MD5

2c099289569327c431cbed731b2d2ffb
SHA1

dafa5efbb911e625309da024d7539e21f64e557b
SHA256

097e56f6b1e651fe8dc42a0153c573ad14001993ecde71791082a65dbd0305b9
SHA512

161e525018c2b30c3dc3fa981205bbdb0b2bfb087bf4bb22ac3aded4c70093a48458c7d4393f48320624848c297904df13a0162195b28b08342d30531f66d95a
SSDEEP

192:MjFTuqSoUmq+qVDBNMvQYI7h98ocNAGMvXhbSxRYj5:YjSNUQYI198oKYheX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c099289569327c431cbed731b2d2ffb_JaffaCakes118

Files

2c099289569327c431cbed731b2d2ffb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\manage\0f4c3802\a942e645\App_Web_i6yxh5xv.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ