d3f5e4a204373f922d1e0c8635d83ca6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3f5e4a204373f922d1e0c8635d83ca6_JaffaCakes118
Size

248KB
MD5

d3f5e4a204373f922d1e0c8635d83ca6
SHA1

d94c703f4edf7746787db33608a92d4c714d7ce2
SHA256

1e5dcc00bbaea5b1eff7059627957fb31be9d681556e119badd57640ef9afce6
SHA512

9102f19b418fbdb8cebcd40c467b2512d5da612d8d3237045cd7abf1860fa0b4c1531cd77734c2bdd23679b790f3c155035a8e5aa58129c8f9382342e171c656
SSDEEP

6144:0oJt7pRTwsEs3n3m+zBqAAjwNBg/dywazPqpnZQAQliQAtEMl+pPsDl7Bkt:HJ4ZQAQlEVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3f5e4a204373f922d1e0c8635d83ca6_JaffaCakes118

Files

d3f5e4a204373f922d1e0c8635d83ca6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\giftcards\99bd15cf\4c609e43\App_Web_6cti0ntq.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ