3932b22397259d8684db9c9b44390f91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3932b22397259d8684db9c9b44390f91_JaffaCakes118
Size

20KB
MD5

3932b22397259d8684db9c9b44390f91
SHA1

c464e001baf26f5920b5bd617bef4de8da12207e
SHA256

4fa3411f51856f2e8939003f7940ea61a962de4106ea6c43471915b9f11522ce
SHA512

bf3f8c5312b1a94057c495ee4eec82c06ab059e1a06fd22b1dc6ac35315b05ca7060a9528f63811c4634579d565ee38ec799afa2f9d33fbc4a557775da630e4c
SSDEEP

192:rg6mWZoKaVlGduLexc2ZgBEVJtSJKCV45P529f6f:rgUaVlG0Lexc2ZgBEsn4B529C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3932b22397259d8684db9c9b44390f91_JaffaCakes118

Files

3932b22397259d8684db9c9b44390f91_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\ticketing\6bbdd108\f6c3fa1f\App_Web_firstdatatransactionhistory.aspx.cdcab7d2.cjckxq_j.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ