471d7da7716f6979d226209a84cf7552_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

471d7da7716f6979d226209a84cf7552_JaffaCakes118
Size

10KB
MD5

471d7da7716f6979d226209a84cf7552
SHA1

a01c574e94992c08afe860ef73039980659aae3f
SHA256

412ad3db399e8d9c170bb8fd395df6d60c0df386ca0fdde8271f0d4fa7256fd8
SHA512

158c99c79a05360c352e120f0a489e339b831671f00f9d2c427a43c1f2a5a82c74385e6b809c91f405b592484f31d44673579cc2bf7b716b5c39197c2f20ceef
SSDEEP

192:KnPdDNCP4XELH8urwAYjibTLewR76RrRxRN7nVwS/wFXFq9:WxCP4GbUAYjiHLewsJLXh6XA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
471d7da7716f6979d226209a84cf7552_JaffaCakes118

Files

471d7da7716f6979d226209a84cf7552_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Temp\IISCompileTemp\root\508a8410\88f477af\App_Web_good_brambar.aspx.cdcab7d2.e4xlu7w2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ