f6a586e14ee7c2bb77bd72a7fd516946_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6a586e14ee7c2bb77bd72a7fd516946_JaffaCakes118
Size

10KB
MD5

f6a586e14ee7c2bb77bd72a7fd516946
SHA1

824474c326264dc359322d4b05f61f22863d1e40
SHA256

7cdd7369bda6eec6f6e4ca8bf6cd1fdd5dd2a7d3482992edee9891f68a891c8a
SHA512

a5a3df12363c7c72db8de2aecfb1001052e327b15d70013b570f663ac9f334825044979520b1a68e855b8705585244a02c40fe7de0254964a10b046136652747
SSDEEP

192:BE6WPzRsMiHU3brtypWjGeaLRkug2nEDg:azRni03/DaLRpg2n1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a586e14ee7c2bb77bd72a7fd516946_JaffaCakes118

Files

f6a586e14ee7c2bb77bd72a7fd516946_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\odeonent\root\d180f301\3c2421\App_Web_home.aspx.cdcab7d2.f7pai5gp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ