a2b2c99da8c114a3a7f5bcdcd225670f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2b2c99da8c114a3a7f5bcdcd225670f_JaffaCakes118
Size

24KB
MD5

a2b2c99da8c114a3a7f5bcdcd225670f
SHA1

78511a79403782be93ae9d18cf0daca5c7107569
SHA256

0902d5a1d2dd12a032083f1ec75b1a79349f0755484c597dcbdab829cb98f728
SHA512

049b04f3ab15e957943c04c1fec9088577e1ea1e89a1725dd54b49d4118e30ab6d289872d78c49a52a7199b746c52f598b66a1736ae75833d75d55c1bf44bd20
SSDEEP

192:V9283axIo+JS5U9/NYYUTkrbLfScOevFyBiHsh/w/fys+HlA/74c1:Cn8/dfbLfScOevAiHq4/OS7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b2c99da8c114a3a7f5bcdcd225670f_JaffaCakes118

Files

a2b2c99da8c114a3a7f5bcdcd225670f_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

t:\temp\Temporary ASP.NET Files\root\04edee33\25370c23\App_Web_9qdsq4hu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ