3119220e81d7f171077760130d592f64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3119220e81d7f171077760130d592f64_JaffaCakes118
Size

12KB
MD5

3119220e81d7f171077760130d592f64
SHA1

41ae119c5174c1008fec9ebbd511eb7600344434
SHA256

c4b4aa12e619b96376ab04612b4b9498b1165a9cce0997574929e659578fa7c5
SHA512

fdcbbea9f6e4bba13ff659c0f94ccc01aaf1d76da9041003a165bcdfeb8d9d9efc6d3768f18c7cec7fe984c26a77226cafd1d7d2615716d45bc4d40ed9673de0
SSDEEP

192:O61nmTk8zqSAob1+Sc+fr6YMk6SFEweU2wthEi9yhtPeOB4KTe6CXCF7KIdmZFd:O4M6qTFEfUh/Ei9UtPBuG9ZFmTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3119220e81d7f171077760130d592f64_JaffaCakes118

Files

3119220e81d7f171077760130d592f64_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\manage\8986674a\a942e645\App_Web_timeslotselector.ascx.9cb068c7.huj18_g4.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ