ce0ac48cd4f76729cdd78f1ad2f8d1e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce0ac48cd4f76729cdd78f1ad2f8d1e5_JaffaCakes118
Size

244KB
MD5

ce0ac48cd4f76729cdd78f1ad2f8d1e5
SHA1

50f1fdbe173ab9c914127c45f2eb3f26b95d1d33
SHA256

d9346bb36e6d39a8dbbb27fa4b8c3867ec3a00ecf9279a4587843fa9afbbdc0f
SHA512

e6ad37182cb2d5028247e45f61d089b69ba17f19d69cc7b2f7a3f1366fa8a9454dc27c089a11861089e7919d94a53a6694ce754b522c5cac959f6e61bb679cf6
SSDEEP

6144:aLMxkWIM/5aBMxKrNsj74BCqiXiKFGl6a+V8XnXn:cMxkWMBMxKrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce0ac48cd4f76729cdd78f1ad2f8d1e5_JaffaCakes118

Files

ce0ac48cd4f76729cdd78f1ad2f8d1e5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\cims\a08afa32\8fc9285d\App_Web_ieetkcu_.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ