a5d3d81b1703c3ac669c04d79d4c8f3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5d3d81b1703c3ac669c04d79d4c8f3f_JaffaCakes118
Size

184KB
MD5

a5d3d81b1703c3ac669c04d79d4c8f3f
SHA1

6c7e91d2ecedf3441e4fb5f313173fabb3ab055c
SHA256

1541dbf5088300eb2add13b69377635c1564ac4f5a66e7c0a041d9e4b5ae76f1
SHA512

09eb06db3992a5f1ed425a388d68f648713e58e23bdcc682d77070a71835569d0c1a6de0dbeca373d846d2f23b7c64d42cb8de403570a34d244538b2dea558f3
SSDEEP

3072:aI4kZIldriZrjydUV6JQZm/E7KI3G67lJiIJUnJEiNvkMJZwvMJ17e5FZTcFTc/s:aI4kZIldriZrjydUV6JQZm/E7KI3G670

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5d3d81b1703c3ac669c04d79d4c8f3f_JaffaCakes118

Files

a5d3d81b1703c3ac669c04d79d4c8f3f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\oboutsuite_3.5\7ffaee90\13344d26\App_Web_24p4boq0.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ