741e33ce240c16f326d0cb57ff2088e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

741e33ce240c16f326d0cb57ff2088e4_JaffaCakes118
Size

10KB
MD5

741e33ce240c16f326d0cb57ff2088e4
SHA1

1fc1b38cebc1c3bfc9878f8d533e92cb166ed39c
SHA256

104b04e309f2fdfc8adce496226b7e75252fe8fd847d40b96a31df538439cc8e
SHA512

40e24343efc4e0f27d0230ce7efd3b7ecc028e7bd482d016df9cb8d039f3d262cd092bd662c8f70ea6ba6b3eeb3c610dcf2f331e1336f6148a8319b78375ccd8
SSDEEP

192:iPGzpmhqtche4P5OXYtmM2Leyc4TR9Ik99PfXUj/rEffvghKMRZ:MGzpW4P25OX82Lef7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
741e33ce240c16f326d0cb57ff2088e4_JaffaCakes118

Files

741e33ce240c16f326d0cb57ff2088e4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\magnet_externalsalesagency\c03dbaa7\197f9052\App_Web_jv3bobhb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ