3fd4e0f83dbfa5a657e64b072935a956_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd4e0f83dbfa5a657e64b072935a956_JaffaCakes118
Size

11KB
MD5

3fd4e0f83dbfa5a657e64b072935a956
SHA1

7e3f4b54ad6f38232911c31aafd2cd734c31e23f
SHA256

9198b0b7b925b49df2de78bb34a3089ca89fff499e974131eacd01c4b9b554ee
SHA512

ad4622d7640e7e848aeb810d5555b79191d249fb2b9d6f8bb30e6c51a55600dfe8d306d2be668669ff98e3af1cd63cb91959c43f11300ee25f6be9c3df32877e
SSDEEP

96:yqa/Khy85uJdoyDxrsAFIZuOFzI0YlGggEp1foP9sOZLy3WyzDUzsu98QSNNgAmL:yqa/KhruBF2FFYjgS2WsXqGDMH8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd4e0f83dbfa5a657e64b072935a956_JaffaCakes118

Files

3fd4e0f83dbfa5a657e64b072935a956_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\824f3cca\9fa4418c\App_Web_vo0sw2od.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ