5be57906f637b21c036294dd07501d25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5be57906f637b21c036294dd07501d25_JaffaCakes118
Size

6KB
MD5

5be57906f637b21c036294dd07501d25
SHA1

99fae9c62b97078324e78889858fc29649166ebc
SHA256

a13e7f34fe64271c9ce0e47bb47668c02ea16667f801c1eed038fabc51e68b93
SHA512

dc6732fac2125f4d7da60ae00484d60ffd7f8f25c34102d23fe054df0d33638fd4603ed56e93d3135a50f16d465d224aeb408d2e583fe0cd283f254d7d769a03
SSDEEP

96:8RHuElBJJ4Y/u6EHHJrv3Sqv0RlqguchR8fFVGM0:eQJrviqYucv8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5be57906f637b21c036294dd07501d25_JaffaCakes118

Files

5be57906f637b21c036294dd07501d25_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\1669e075\a2dd327c\App_Web__puffsimplelist.ascx.a8d08dba.7o1rfbzw.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ