3a0052b8db9d2625c4c0dae2a2d29b95_JaffaCakes118 | Triage

Sharing

General

Target

3a0052b8db9d2625c4c0dae2a2d29b95_JaffaCakes118
Size

13KB
MD5

3a0052b8db9d2625c4c0dae2a2d29b95
SHA1

11667421726b50ece1b92a5a3a3fed6eb9666d57
SHA256

7c36be0a956768b23f2db2de6774857ed22240213deb2db1c0f867faf9ebf194
SHA512

2562ce310462b295dd0e91c2b66f2bff1a929b7eb1cea0ce24523dbfb762992f0edd204cc4a2712c259d055247b0aae76c713cf2f3806a9d5ac92e2a777a96d8
SSDEEP

192:XzgdX+2OVyOs6a0WWo8QkMptqe1LZ3L34I7wBkrLN10oJCvMM:sd16lWWEpUebWkwAM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a0052b8db9d2625c4c0dae2a2d29b95_JaffaCakes118

Files

3a0052b8db9d2625c4c0dae2a2d29b95_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\fe909879\93bd23e1\App_Web__accountlist.cshtml.663f6027.dxulynlr.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ