8691ac5d349062b0c8e4d22c872eb28c_JaffaCakes118 | Triage

Sharing

General

Target

8691ac5d349062b0c8e4d22c872eb28c_JaffaCakes118
Size

15KB
MD5

8691ac5d349062b0c8e4d22c872eb28c
SHA1

15c0a8cf05277b741b53f6de88d250da4fcb6ab2
SHA256

efeaf65d48efa232cdba31b630339d1384d1f78ecafc2005d2ecde3695e2bedb
SHA512

4140e8352229cbf6b62174499e0bd1eced1875c3a7f7212bd5db92e136e70632d2d9b7c99de4edf0daa9672fa494e265aefbeb9d6437dd70b012bb0d3908dc82
SSDEEP

192:iTWkrW5BLDQ1L/uMuRNmoSJrFqyFRZvMnPyRy97M/n5Y:OWkrKDQ1L/u1dwHxMcn5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8691ac5d349062b0c8e4d22c872eb28c_JaffaCakes118

Files

8691ac5d349062b0c8e4d22c872eb28c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\2548e6f5\40186e38\App_Web_f1jtejjo.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ