3b4a2ceee8e11cb63361b460d5a3c849_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4a2ceee8e11cb63361b460d5a3c849_JaffaCakes118
Size

136KB
MD5

3b4a2ceee8e11cb63361b460d5a3c849
SHA1

614713677a5cfb705424535e807d7e02a0de3ff1
SHA256

5404aa0bbe37e06c07eb231be79925f475159ce9a0f38f1518cd6c79da7b550c
SHA512

33d429735a50153990b2013557bfd23e56616cc893f89d71eec5dd71d9507d41bcdcdaf027b5b0189bc9300ec5ffbea54bd701a00278ef4867a9f70ee12442c9
SSDEEP

3072:GCNwaOHssaJICxSxpDlW4lXwlf6VchYAvMtw6Z1DCq:GCNwaOHssaJICxSr5WoXQf6VcCt3Z1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4a2ceee8e11cb63361b460d5a3c849_JaffaCakes118

Files

3b4a2ceee8e11cb63361b460d5a3c849_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Sitichai-Dev\AppData\Local\Temp\Temporary ASP.NET Files\root\b2b1db9e\634186\App_Web_yvnaewb2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ