35fe6fe4ad1997461e909e1334c71876_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35fe6fe4ad1997461e909e1334c71876_JaffaCakes118
Size

11KB
MD5

35fe6fe4ad1997461e909e1334c71876
SHA1

851802f3a394523908c19acb2029cc3e4b59577d
SHA256

cf49c5e6a9101c8d2b07f64568c42159b70dc18f67205d8d01007bf58db4c1ea
SHA512

e8c6f12f59ef7fd79299de73d36b901fe1d2f248f6b1e4054e5308a52c840e63fda156552b00a851a599f26eece4b47762dbf6498f7cad30cc44ded0d99337a6
SSDEEP

192:+OE1RNg+068P88df+r8kc+JR2kg1BQb12+tRHWYMRI:+OcgGokc+72Z65rHHWo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35fe6fe4ad1997461e909e1334c71876_JaffaCakes118

Files

35fe6fe4ad1997461e909e1334c71876_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\geoffcharltonbuilders\b464aad1\6396cf1c\App_Web_zkjwvj2z.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ