abcacf3f151973898d42ec69cf641a28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abcacf3f151973898d42ec69cf641a28_JaffaCakes118
Size

236KB
MD5

abcacf3f151973898d42ec69cf641a28
SHA1

bbe8bcddf2773e97d6e98f91a870298b6dde9e71
SHA256

548618827d1849933f20f6a962bef9f33ca631f9885840d393bbbd8b053741bf
SHA512

dd9ef6cb5fa600d6e3b1369155dad420e4ef6f0701371799ba47a40a8ace05d18d5dec20a131885c04b66b340604ba5a9ec919853a5b883c17a52f0c29d9115f
SSDEEP

1536:Usj1BhhcOqc7fScJyfS9itY9/OdbAwwUP2UY:58OqUSsDE4G5wS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abcacf3f151973898d42ec69cf641a28_JaffaCakes118

Files

abcacf3f151973898d42ec69cf641a28_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Temp\IISCompileTemp\root\508a8410\88f477af\App_Web_zcnq2gr1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ