a1b7e48d903d6c8e7089479e328a62cf_JaffaCakes118 | Triage

Sharing

General

Target

a1b7e48d903d6c8e7089479e328a62cf_JaffaCakes118
Size

4KB
MD5

a1b7e48d903d6c8e7089479e328a62cf
SHA1

2fccddc0cb72b2fbc75db8d3f7ebd61466fad0fe
SHA256

371d2396a4d4f51fa0a1d8d3e47f0f26390fe73ddac6c841a48668554ee3bad4
SHA512

a0c395903e9e75c8f1a101d7a17a72591a020c9e9baf185d7a2a350fc67c0ed56fa64cd26d4c4e6384e952a16354bb405a219dedf7b8d4bb5c6eb3550f8726c9
SSDEEP

48:6XaW50jSiKtsmbj+FHVOkNGMQuJGSJ8i9LMAd2h11ulAjaD8q:yj8SiKqmbj+jNtpMAoh+ujaD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1b7e48d903d6c8e7089479e328a62cf_JaffaCakes118

Files

a1b7e48d903d6c8e7089479e328a62cf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\fe909879\93bd23e1\App_global.asax.mdkwpyyw.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ