3022c92c0993eecfb444330656fe0efd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3022c92c0993eecfb444330656fe0efd_JaffaCakes118
Size

12KB
MD5

3022c92c0993eecfb444330656fe0efd
SHA1

2a459633bd6323518b0ce8e424a0efcc9fcc9dbd
SHA256

0f62eca501caea7dfaec8411f7d2bf71b3b2ddcbcf0d1093c5fac8bd377463b5
SHA512

25f0533f65c80c926de80174fe6a4309dd662d270ce6fc8195107c39aa58d93ab02e50177473da08dc05d25dfa3843c43e8a35c7a18beaa7f8f21e4938d02e8b
SSDEEP

192:g10jFH/OLDOyFIXfCsbuzizVnjN2cGQ5h3foPHf4Tius8O1nG4Esh:gk5C2zNjhGQ/vi/4T5s8Os6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3022c92c0993eecfb444330656fe0efd_JaffaCakes118

Files

3022c92c0993eecfb444330656fe0efd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\manage\4910f457\bf3bda2d\App_Web_templatededitor.ascx.6b94baad.lqmjqdok.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ