e27400d85a1ddb85c12b121ec5089ffd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e27400d85a1ddb85c12b121ec5089ffd_JaffaCakes118
Size

32KB
MD5

e27400d85a1ddb85c12b121ec5089ffd
SHA1

f68baff396cecb9cbc83b6db6bd9b73ce7396e91
SHA256

ace54db8a934475840aa8d178a88362932955f4c9c9b9e63282b6a64cf4ae495
SHA512

8a19c99058fa0e76d73e4d99fdf800bdb740da18ca5bb7bcd4fde73afc726214cc987d5eef0518c3acd2e81bfdcb131f18410034244308397601db1f6ce9f05a
SSDEEP

384:xaHQXH2kEVMBF7ZZ+TMRnsaFlc7imH9W:4HQXH2kxf3jcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e27400d85a1ddb85c12b121ec5089ffd_JaffaCakes118

Files

e27400d85a1ddb85c12b121ec5089ffd_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Ercan\AppData\Local\Temp\Temporary ASP.NET Files\root\76bcce8d\c32c488e\App_Web_7qyoz3vu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ