e9da3b5676fbb02ea316d9c48c9281e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9da3b5676fbb02ea316d9c48c9281e4_JaffaCakes118
Size

4KB
MD5

e9da3b5676fbb02ea316d9c48c9281e4
SHA1

011106890dce22ec5e3cb8e4cba0bd7eecfeb785
SHA256

65e761b4ab0dae1a8449fdb530a7d0fcf98d89eb1daa1e97cb76ef57b5271367
SHA512

b167e2e33c04ba2c782e97bb7e01fbd9a7e2a196b145607fa36e6be89e3d4971f55d017638f1b83372acf402c64e82742f9d96afdb9f1a65247cc8d9cd4e3716

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9da3b5676fbb02ea316d9c48c9281e4_JaffaCakes118

Files

e9da3b5676fbb02ea316d9c48c9281e4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

t:\temp\Temporary ASP.NET Files\root\04edee33\25370c23\App_Browsers.azxyoq7b.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ