a414e5535dde66af882b15b12123bdfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a414e5535dde66af882b15b12123bdfe_JaffaCakes118
Size

32KB
MD5

a414e5535dde66af882b15b12123bdfe
SHA1

6a6b2d94169fb24658be51c74268bfbc12e8a5d6
SHA256

1bd28521d798b0fcdc5a5062eb89a9157e401931c1e474b7c2992fadcf80a245
SHA512

a9adf67f8f1e2c8b316207e449054e6ec847e63938208323130fa6de81be435eeadc040996e47b440ebd1b97b100896af356df84227e91afcb94fe843bb5b25c
SSDEEP

384:qTBNwqhCPfLI3XFI4J+7UN5yLY/VaNhVidXWI8:qNNwqh0w2OzNq/4xWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a414e5535dde66af882b15b12123bdfe_JaffaCakes118

Files

a414e5535dde66af882b15b12123bdfe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\161c564c\770595d5\App_Web_appointmenttooltipvb.ascx.54a77dd2.mklvidos.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ