822ca080fdaa6d5b1fecc959e71db29c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

822ca080fdaa6d5b1fecc959e71db29c_JaffaCakes118
Size

18KB
MD5

822ca080fdaa6d5b1fecc959e71db29c
SHA1

2797cf4fb6362995f059139fb7c51ef75bb12fa9
SHA256

9788b0e7d0b6387b5ae31afa2393311c92a74db28738f0ea30f356d6dbcf9518
SHA512

3d38cd4ecc327526cf205ae9043789c2f19d5d9fdc24d9b4dc65dc4ac7de170766a2ee504c7ea63c5108125da77fdb96a8b0e06442c4ab2a0b23d87420184405
SSDEEP

384:PddiRzH4e50zvkGa4W0zULiywUavuD56Rm9ps/NqanIX4jX:4yvkb0zULiyeGDUw3mQGn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
822ca080fdaa6d5b1fecc959e71db29c_JaffaCakes118

Files

822ca080fdaa6d5b1fecc959e71db29c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\fe909879\93bd23e1\App_GlobalResources.mcyzjtji.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ