c7c4be011474229794e3e5579bbec1b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7c4be011474229794e3e5579bbec1b5_JaffaCakes118
Size

10KB
MD5

c7c4be011474229794e3e5579bbec1b5
SHA1

ec58f34d1c08e1f5f043002d52a72e1562d4c02b
SHA256

7d2eec1f5b4f0433a638396cf72b89bbb56e2e20bf187bae5392b6c5a86bd872
SHA512

ae99c79fb00dc5938a332a764235df7308465a6f827678596406068a19d447a151be8a4d1b5239d50f642c135de4e9abf5563249c7d511832158aafe8b544c38
SSDEEP

96:pno7mr28rjnxvgnHvau2U6pP9OHlrMa1bNTtKvCj9A3uLekKX1smtCza3z2up/ci:pgmK8pvCa/pP9YF1bLWnCuKWc5H5Q/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7c4be011474229794e3e5579bbec1b5_JaffaCakes118

Files

c7c4be011474229794e3e5579bbec1b5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\manage\4ef9f0b6\bf3bda2d\App_Web_rq3qbwfy.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ