96775a0f55f54ee240b239e453ac5223_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96775a0f55f54ee240b239e453ac5223_JaffaCakes118
Size

103KB
MD5

96775a0f55f54ee240b239e453ac5223
SHA1

e4580bb20cff69bb8cd233c77a58fa531faf8071
SHA256

75b6b4a96a82f5a5d5869c15f7fe3778b3c5bd576d7bae4e47e7685a5e6fddf0
SHA512

3a032cfa07ead7e300032ba38cdf6c64a81dca91e6f570638a1a109825f056e18ef17fb958f4f44be83db143c161f734c7e59a1a61676b488111109cdc9a4b7a
SSDEEP

1536:A9DjZmJKDvUTfqoI+KR1G/BhDj33MrapXWucST9J:A9DjZskvWfqdR1GZV3MrapXWucST9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96775a0f55f54ee240b239e453ac5223_JaffaCakes118

Files

96775a0f55f54ee240b239e453ac5223_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\5311cb86\b8cbb0fa\App_Web_m11abb01.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ