e180d23c31f7ed6dcae35501cc076b67_JaffaCakes118 | Triage

Sharing

General

Target

e180d23c31f7ed6dcae35501cc076b67_JaffaCakes118
Size

16KB
MD5

e180d23c31f7ed6dcae35501cc076b67
SHA1

bf98b1b5e8a12792942faadf4748b53a3fe71ba1
SHA256

c917010996e04e95dc51a615055cdf321bf0f02ed1f0f669570384e0dbefa7c1
SHA512

0bb5d57e76b3dff1f9daecc324db7aedf9ce7fcbcb125d8ab2b231dd1254be03787d4c6ac49ddefcbda3a99ea139cf5c62c6e6e96e08fda15de945f1c75d8cfe
SSDEEP

384:XEv5Z2EVok37B7c7uy9ZM9HsoSd45y7PFAlQUE5U:Uv5U70Ht9UbFAlS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e180d23c31f7ed6dcae35501cc076b67_JaffaCakes118

Files

e180d23c31f7ed6dcae35501cc076b67_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\IDE\IDETools_2012.1\Temp\IDETools\Refactor\Plugins\Refactor_ASPNET\Refactor_ToggleViewState\obj\Release\Refactor_ToggleViewState.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ