316743b1cd373ac91790636efb4682cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

316743b1cd373ac91790636efb4682cc_JaffaCakes118
Size

298KB
MD5

316743b1cd373ac91790636efb4682cc
SHA1

21a31390fce48f4f42bd6cbfe5d8f470b2d3fd6b
SHA256

7d292f9a55fbc67f54633f7fd9505d2fba44154631ae037a1ca198732102c214
SHA512

b3b7b996592f0676476e31d07ebde46a658cf9a225537f226d903018e7b39d53fc9be406d85b1f014eacbc2b5a21af6fd404097842ea0fd385895d1509a78870
SSDEEP

6144:qubHWJStOMgPjEVdoL7p91qFhE/3k/X1PP6gf6dJNBg2qREf/MY9DkJ/frjYnJLt:RbHWJStOMgPjEVdovp91qFhE/3k/XB6p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
316743b1cd373ac91790636efb4682cc_JaffaCakes118

Files

316743b1cd373ac91790636efb4682cc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\websites\vl\trunk\vl\vl.web\obj\Debug\vl.web.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ