2f3b859716d60164083890c6f87351af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f3b859716d60164083890c6f87351af_JaffaCakes118
Size

100KB
MD5

2f3b859716d60164083890c6f87351af
SHA1

345eafd6c50301c59e3fec91117d049d54a3ccb4
SHA256

1a4b4c8025d5d90136a8e143f200714ce339808d86fa3ef677b956bc25ec2352
SHA512

4b7954ca43ee7aad4edab3a6ec4c147e244fd2c60942bd53c9bccb6e65b0199145262bb60770e0447a4cab67f4a4eb15f605f82e6252077f96564e18d3c291c0
SSDEEP

1536:nBqYuMt9aBXX5fiBzL2uZOmymWAosxIIDpHLti:BDUXXJixBZOmymWAosxIIDpHLY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f3b859716d60164083890c6f87351af_JaffaCakes118

Files

2f3b859716d60164083890c6f87351af_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\inetpub\wwwroot\PadraoSeguros\Facade\obj\Debug\LC.Web.PadraoSeguros.Facade.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ