443dee1dab937532c2a704c525016e2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

443dee1dab937532c2a704c525016e2b_JaffaCakes118
Size

44KB
MD5

443dee1dab937532c2a704c525016e2b
SHA1

a6411afd53a99161933b1476d96c60495bb204b1
SHA256

b2c3b99c4a1d8588be69c0805ced70db0a4d1faac198d1a205950682281837c2
SHA512

8a9cb0c7fd76a19f5475aee158800c1c7f52d66d502fdbc7d22b11403abc5452950d97ca10b3035912a612f8c5a33d96f76c19d1ec4f627192c25842a01ad257
SSDEEP

768:J69mWGb07Z3c8gsdMm8rxRHxfv/+/QiEJGTIssk:J69mWc07ZMRXHxfv/zJFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
443dee1dab937532c2a704c525016e2b_JaffaCakes118

Files

443dee1dab937532c2a704c525016e2b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\portla2008\13670d27\2421a326\App_Web_adbs69hd.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ