b0d98a83d89e6de9e7fc06ed206d3297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0d98a83d89e6de9e7fc06ed206d3297_JaffaCakes118
Size

9KB
MD5

b0d98a83d89e6de9e7fc06ed206d3297
SHA1

ba1b9ea01dc7b8eb0a4fcfdc0db18a2c89beb2c0
SHA256

58327b95d122c65f34d30a512f2b6e664c64863b046b19507c7a44b12588537d
SHA512

f6ba357031a4524c8dee071735228fcf1aa517be429f33c44bbcb4d02ae7cf7c2b42a532bc961c8c564e4767e8111e0adf65ae5a2f66bf6934abb8ae00d87519
SSDEEP

192:gz2AGMm6SiDsVv9s0fPXfT0AR2vn/ZYCjUw35TAgapKs1J:gC93fPXL0fKUig4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0d98a83d89e6de9e7fc06ed206d3297_JaffaCakes118

Files

b0d98a83d89e6de9e7fc06ed206d3297_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\8644f70d\ad1802a9\App_Web_mainmenu.ascx.6e216ea4.fya49w5l.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ