da8f04a7e6aa1b5b283a8ca6952e1678_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da8f04a7e6aa1b5b283a8ca6952e1678_JaffaCakes118
Size

56KB
MD5

da8f04a7e6aa1b5b283a8ca6952e1678
SHA1

627b9d50cf615518d99a1f307db0809e65457b9b
SHA256

48b2f02f0202f3a7a47215d176440f558c13b14d30b76096a7cc0f6a55f0d8ef
SHA512

64944a9c3dc88771c11d3d56a4756a82ddb47270ce6661c5e0fee380a0aca9b22ae4eb816c0af66a1b32cc74ec8dcb8be648662457cccc5bba1b3d5e4f2711e2
SSDEEP

1536:V0boiGiKTGEZCS/kLY0ZJTOtUIe+tCHZ:V0siGiKTTCS/kLY0ZJTOtbNtCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da8f04a7e6aa1b5b283a8ca6952e1678_JaffaCakes118

Files

da8f04a7e6aa1b5b283a8ca6952e1678_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\portal\ae22163c\91560e01\App_Web_0vvkwybp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ