f58d1726bf9ef55b26beb990093b7433_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f58d1726bf9ef55b26beb990093b7433_JaffaCakes118
Size

5KB
MD5

f58d1726bf9ef55b26beb990093b7433
SHA1

2e73e530c982720d0e1cd6b95c8fee087b67fbc9
SHA256

554fcc4a8e424858681b2279a92df99b45763f844079188cd9ab2397077c43b6
SHA512

9db89804011ac7c3a000b3c838e5e38ac7d25526b88e9067a65e997455da8f8cb019093813c6608c0744e0a4dbe32a77c6b3a4757a3c5c208d32e58e542f7535
SSDEEP

96:71kCiErIWznkDGVzu/PrYJuXsFMbRif2S:BkC5fkDmYPZXsG18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f58d1726bf9ef55b26beb990093b7433_JaffaCakes118

Files

f58d1726bf9ef55b26beb990093b7433_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\manage\99798802\3f2612a1\App_Web_rupi63lv.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ