bb6080fc4223fb47d72db06909b4ba02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb6080fc4223fb47d72db06909b4ba02_JaffaCakes118
Size

13KB
MD5

bb6080fc4223fb47d72db06909b4ba02
SHA1

368b2ffa8c81a051b4bfc5dc3b33cb8c1d941162
SHA256

b1e3356855e436c8e9713981e3e0677a881369fd6c1debc73c5d062c915f6e94
SHA512

9f370659e3b1842694846ad94d047ee6d61b14ae7f98e4135240637097dc2d40a66056c0a4e5e5730128af54df28c75d767d0d4cff34d02e83c82d029b7a55f4
SSDEEP

192:BhzYKKm4wUCE6Yoi9N3UemKhC6aN+7fDdPASEHoeHQWM1:DHKm0CEhoAUemKhyNG1XELV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb6080fc4223fb47d72db06909b4ba02_JaffaCakes118

Files

bb6080fc4223fb47d72db06909b4ba02_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Nicholas\AppData\Local\Temp\Temporary ASP.NET Files\root\6600f868\10904ada\App_Web_site.master.639c3968.moqheqrg.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ