8a04fa5a4d1c69c726296601517d5266_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a04fa5a4d1c69c726296601517d5266_JaffaCakes118
Size

88KB
MD5

8a04fa5a4d1c69c726296601517d5266
SHA1

94630c7cc48615a771a9dd6d8c469048924d5ebf
SHA256

2ca54765a4b28743de40dd375bded709f8190cb3a1e72473d3166b523ee7196a
SHA512

f7ca98cd3d19cd372852a6e88c7f9ee28a6d6133013b275fc98c30203be2c2f00bb51038e83b5db06341071b1282bb06ec750f5158f18be3bcd051591b767f67
SSDEEP

768:WEmfocUMfcWi6nUJAuoqdyOAoUiqewuLLfpg3gT2ST8YAdrTzbI4/6Ksox/A0E7L:6eVLd/QYyjoNUr9ZLb67

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a04fa5a4d1c69c726296601517d5266_JaffaCakes118

Files

8a04fa5a4d1c69c726296601517d5266_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

t:\temp\Temporary ASP.NET Files\root\04edee33\25370c23\App_Web_as7kq6ln.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ