885eca7951ec45631f95b2add1bf9c09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

885eca7951ec45631f95b2add1bf9c09_JaffaCakes118
Size

8KB
MD5

885eca7951ec45631f95b2add1bf9c09
SHA1

bae824860155ee6a16b4894a67e0d54bc278d9b0
SHA256

0060fd3fbd9f1b150126c60ecc928d6f0b8288ba792971ad5506248035a37529
SHA512

b51ae10288e55520ed9dea641721aba66338b579e05ba23e03d29a13bd9fec7abd0e1796794ae54a1cc81d839ebe6539f4282b17b2620974ff10d45359dd84de
SSDEEP

192:CWbL8RZT53XuvjAW+Dyh1XGsP/KC6QAVIdyfm:CIL8RZT5uvjARDUs2/X6Qv4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
885eca7951ec45631f95b2add1bf9c09_JaffaCakes118

Files

885eca7951ec45631f95b2add1bf9c09_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\manage\4910f457\bf3bda2d\App_Web_browselibrary.ascx.10254832.z_vxngom.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ