8960608d47c6ea92f052d8bc62834ace_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8960608d47c6ea92f052d8bc62834ace_JaffaCakes118
Size

4KB
MD5

8960608d47c6ea92f052d8bc62834ace
SHA1

95776c0555abcd2361b1e1f66954bab9c4701f98
SHA256

7234062e8912eedc3a91e294bedb81fa7beb3950d9c34e44281a170bb7a9c678
SHA512

4842c1a149be69ed9f44cdc31d0f94cf2438876070f78d704af85b7a93351870ad628f1864cccf4b3b837030d4d2e76590775a7deee7b1afd21e0fc2aa2c73f3
SSDEEP

48:6paW50jSiKtsmbj+Fy94OkNGMQuJPmJ8i9LMs2eL01ulAqxaDqKq:Uj8SiKqmbj+EyctpMdeTuKaD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8960608d47c6ea92f052d8bc62834ace_JaffaCakes118

Files

8960608d47c6ea92f052d8bc62834ace_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\b62665c6\53b48abe\App_global.asax.ugur9v6q.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ