472b7e2e84d96d322339f36d7d84d888_JaffaCakes118 | Triage

Sharing

General

Target

472b7e2e84d96d322339f36d7d84d888_JaffaCakes118
Size

60KB
MD5

472b7e2e84d96d322339f36d7d84d888
SHA1

ce8a4f9f8a18c20525dee34e8990142cda0a110a
SHA256

d9cd5295fa0ea06361f8a98a90cd67c63a4e635d150d896d4bd4788e48cb17b9
SHA512

066ddb3c9c85880d44618174252231d539926562d06e4a229736ec50ab7a43fbde6c3c2f981f1c2485c8df44f213c44c512800514a5e423aeaec3d00ee9d7181
SSDEEP

384:a+3YDTvg6/hGVJlWZZLw8S7ZnyRPha0VtwCoUsDN3Ga1LRGxAe1TdRcqYIvrbYsE:aqYGX0bSNnuVOmGh0fiIvYsKtbnGK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
472b7e2e84d96d322339f36d7d84d888_JaffaCakes118

Files

472b7e2e84d96d322339f36d7d84d888_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\trunk\57daa447\7ca56577\App_Web_projectsearch.aspx.431797e0.w7kje71f.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ