8d302276f19cbf7d04e3b273f7e31d4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d302276f19cbf7d04e3b273f7e31d4f_JaffaCakes118
Size

17KB
MD5

8d302276f19cbf7d04e3b273f7e31d4f
SHA1

08c18227d16727d31dde2c6e6b1b8a34f88c17ac
SHA256

7c9d24af88c2012c6e7ecc20ab86b0601230a309ac668d2b074fa3e89656e646
SHA512

27f921bf1752ef010d40db4bb2bd5aa21144c8b814a57d3ec308054d0049bdde9bbe07fbbf8e270b6f9d06ae5bbe995dd90790c0058933a03af19bd4849aabe8
SSDEEP

192:osTtghL47couXZ78tMJdUYOnwALV40bfPnMY/fCXOr52g7BMQ0Kb0NqL6lq:osTtghLhoQ2MXIjV/PnMYXr7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d302276f19cbf7d04e3b273f7e31d4f_JaffaCakes118

Files

8d302276f19cbf7d04e3b273f7e31d4f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\palacehotelguestportal\3806cbbc\6feb4d5d\App_Web_k445djp1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ