633ae0d8c77af1e96f440f9fad9ec240_JaffaCakes118 | Triage

Sharing

General

Target

633ae0d8c77af1e96f440f9fad9ec240_JaffaCakes118
Size

94KB
MD5

633ae0d8c77af1e96f440f9fad9ec240
SHA1

b5a7ab801c41f76ac36579852d9bfe3c158a92bc
SHA256

8879a8587b14d44cd248ff36ad629c6d8b9e2f8582dd69d71157867f2b554022
SHA512

c4d6e93d42afd021e4668b8921fe5f9256165e225d3492b1e728b7d0c8f1f18c538b91bd3c0154261ad60348038fe72d4264997c3df7d5d01249564b4154f39a
SSDEEP

768:rkVYtcmRWnIIF0ynXgnix4RBJ4ek1yqPco6TtOljjsLCoPjnf:rkStknXC19bk1yqkTtOlj4Wqjnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
633ae0d8c77af1e96f440f9fad9ec240_JaffaCakes118

Files

633ae0d8c77af1e96f440f9fad9ec240_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\mercer.belong.weightlosschallenge\9a886d1b\6107c3f8\App_Web_t4txtmdq.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ