2fa7b5c6aeb8cd17192762f10a48c107_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fa7b5c6aeb8cd17192762f10a48c107_JaffaCakes118
Size

28KB
MD5

2fa7b5c6aeb8cd17192762f10a48c107
SHA1

c70046d3f546a6c3312748e5f6165d8165832b2e
SHA256

ab56a61751f09a228f4063a4ea95b221652d9cbfe30ad8f0e9b080fdf42c3f36
SHA512

5567730fbdf6bdfeabf0f1e6ef389dfff8f02cc1da7434e8084383aff1942742f0a0adaea7afdd572e28d715af73f6fb8dacd31b35e034a1c3a116ad2bec0c2a
SSDEEP

384:ys3ULh621gr80iTink79GGyLZqmrrLcyC0IAL7HaHJ5MLiM2JAfPI+lgVeG3YBao:yswnyEm/L1CvvMLiM22fPIWgVeG3vHS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa7b5c6aeb8cd17192762f10a48c107_JaffaCakes118

Files

2fa7b5c6aeb8cd17192762f10a48c107_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\trunk\57daa447\7ca56577\App_Web_importmanager.aspx.b6bb2f6c.qhma4mq7.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ