93febe16a8be2d9e6faf6ca33c78fd61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93febe16a8be2d9e6faf6ca33c78fd61_JaffaCakes118
Size

56KB
MD5

93febe16a8be2d9e6faf6ca33c78fd61
SHA1

a0b6b35340b05c1f738be65895732c358c18d6dc
SHA256

a53738fb4b9c6ebcaf3f9be5cc258480f3dd0c1a1c0ef553873a2fa03f7dcfe5
SHA512

f0232003579b9b4acf18b92bf8f887287d77a7f8b1f4503b57326997bee0476623a5478ee63e151e324e95dc265b103a19f847b3993e6f2513bb3f37a2c25871
SSDEEP

768:zGuHbsxD1VN+Rt2BP6W4QzjGWpzrfMEGISDq:rbsx2K0GGWpnQI4q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93febe16a8be2d9e6faf6ca33c78fd61_JaffaCakes118

Files

93febe16a8be2d9e6faf6ca33c78fd61_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\trunk\9a0bcd93\f4937bc6\App_Web_activitycodesmanager.aspx.b6bb2f6c.r0cep78q.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ