394f38e1394cff63b7bebf706d303ace_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

394f38e1394cff63b7bebf706d303ace_JaffaCakes118
Size

168KB
MD5

394f38e1394cff63b7bebf706d303ace
SHA1

82a3fbaa02117442b16871682f33c83c0c84dbd3
SHA256

a8887e265658a3e70b4ad8fe9b1ea8cc5e6149ed3eccfe3d54a034b13eb80522
SHA512

d6be0b78c2fe80369a6fb681819e42b91c1fd38ed15aad098d434e391aa1e95d25337551c31c18703cee391d4e3fad4181981932d18e7db309e303dc81b3292f
SSDEEP

3072:FLxYNHNeXwEW+PChe4ionbp6PSnL/tubnqc:FLxYNteAEqhxnL/tubnF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
394f38e1394cff63b7bebf706d303ace_JaffaCakes118

Files

394f38e1394cff63b7bebf706d303ace_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\coachingdatatest\2a183084\627f78b2\App_Web_7luqjgcl.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ