376c35edb914a9b988129bce35266325_JaffaCakes118 | Triage

Sharing

General

Target

376c35edb914a9b988129bce35266325_JaffaCakes118
Size

32KB
MD5

376c35edb914a9b988129bce35266325
SHA1

82271d3f130323c3ccf026936d22f761870b731c
SHA256

91294136f022ba2b9549c1f4a2eb06136c2019234d82c9fec34e1baf5c45ceaa
SHA512

34161eebc247108487236af5064bc6f2a3ae29c987a69483a0fa3bc5a9846580c70f63ef9651a9465464599f16ddd724006957bf274faf27110dafa2468521a0
SSDEEP

384:XJa8bJoM8KG20fWHsurId5TLg6LevT8aisBqhusbm3mOorwqRfUIJ0ls1NI:XIYpIz06LWbBqwj2O9NAL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376c35edb914a9b988129bce35266325_JaffaCakes118

Files

376c35edb914a9b988129bce35266325_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\magnetsingleoffercart\169f0949\1724f9a7\App_Web_zsljjw5e.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ