3e99ad199445b9ba8542b4816dea1687_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e99ad199445b9ba8542b4816dea1687_JaffaCakes118
Size

124KB
MD5

3e99ad199445b9ba8542b4816dea1687
SHA1

71214d7c52883c136c9783e7dd1d345162c877b3
SHA256

2428aecd5272db0e9febfd1e6095b34dee3f071d375ca7beb6fc21d8f22b90c1
SHA512

27cb33e3490a7ced33129075e3f04182025900a35d9c154d1c34b3ff5d9ef7e4cc84ad55ac4e59d4847df014dd7ad6db660f7709bdbfef4bac703976096e3bb7
SSDEEP

3072:tYz+ee9ZDhjeNeXSpejZtviTO9OHCgIu07omh5mJXR:OzJIu07DmJXR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e99ad199445b9ba8542b4816dea1687_JaffaCakes118

Files

3e99ad199445b9ba8542b4816dea1687_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\coachingdatatest\2a183084\627f78b2\App_Web_ceufypfe.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ