b2fee747617b7b26babeda3ca711f15e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2fee747617b7b26babeda3ca711f15e_JaffaCakes118
Size

176KB
MD5

b2fee747617b7b26babeda3ca711f15e
SHA1

ccc5158e7e115ae517d5999e61790584706de700
SHA256

6738be07e8ded5f9ec4e4c76345357de660a09c97f86795e674d0ed8c97e8a53
SHA512

51a032455b12386daf029b5a7ce7733c7a517d3e966e007492a318981127ae447819c974acc6660d8409d60ae3e93b4ba228c3c332e5fd0e4b2189fdc4206f44
SSDEEP

1536:ZvGrT4h3L/lBnk9N7TQAkvgIq/r15pbQ0sX9GtIXIYxD:ZOP4hbtBnk9N7TQA8q/pfmU7YN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2fee747617b7b26babeda3ca711f15e_JaffaCakes118

Files

b2fee747617b7b26babeda3ca711f15e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Temp\IISCompileTemp\root\508a8410\88f477af\App_Web_q7n5bufn.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ