8331f54986843b55c70ce3a5f701605c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8331f54986843b55c70ce3a5f701605c_JaffaCakes118
Size

11KB
MD5

8331f54986843b55c70ce3a5f701605c
SHA1

923162f659e692a54fdb7ab77bb9b1ee5cd90994
SHA256

4a4cea2400e2d4b951de359fd2614f950db3f88288fa50b3cdf36b5d03b5b6e2
SHA512

dbb882038c0f1afc359970834a967537ac2067008d985c5f6435240a1a42acfd9f8ac2653ebb3064daf0177264e383a700da8698a6971cacfa818deadf06bf57
SSDEEP

192:H8P5SakluAb+1V0/qN/97P6dZmV/Vn/JVR3mHFVorz1oM5K:HOklx+1aO/9D2ZmV/J/JD39on

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8331f54986843b55c70ce3a5f701605c_JaffaCakes118

Files

8331f54986843b55c70ce3a5f701605c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\manage\4ef9f0b6\bf3bda2d\App_Web_rlwo1z2g.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ