b442bff42b7875a33027e5d3800836c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b442bff42b7875a33027e5d3800836c2_JaffaCakes118
Size

13KB
MD5

b442bff42b7875a33027e5d3800836c2
SHA1

6b86bce6263215b25352856aa24017d12feafd06
SHA256

4567bafd4828f494b890febe598879a60a06a4ca5d6880769774f63d3b9e8590
SHA512

3804335eec617af2aa7487f2cf08c75fd4caf49981996db406c418e033abc70b1fa80b2f172f1d8c65f85af96b59d5017f0967e20daa0ba73117f18b7e8659f9
SSDEEP

192:8tnYCmBwesVhooIxF7KFUPWF98fgHY1lLuPhW+ophsGgWmAEP4fWDnv:8tSuD98f7lKPhRovsNAOg+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b442bff42b7875a33027e5d3800836c2_JaffaCakes118

Files

b442bff42b7875a33027e5d3800836c2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\manage\99798802\3f2612a1\App_Web_djhps2xa.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ