fa2bec2aa0ab30b1d36408d472a1b6b8_JaffaCakes118 | Triage

Sharing

General

Target

fa2bec2aa0ab30b1d36408d472a1b6b8_JaffaCakes118
Size

51KB
MD5

fa2bec2aa0ab30b1d36408d472a1b6b8
SHA1

a429765b66f0e4210dea5fd1c7f1d2419e2f8070
SHA256

a649d71a4fe368711615d316780b998df1007d1a5ce575409492ba7714662060
SHA512

34107dfc403c30eb673926e4bf422296fa4f4cf3e06926792cd26341062025123df6a9da609230ffe04dda0b641184fffdf53b914abf02d2ce5e510b584477c3
SSDEEP

768:9ByAIvRzdpG9FH+83BtH+1662mAfCVmBa0:zyAupp2mAfCVmB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa2bec2aa0ab30b1d36408d472a1b6b8_JaffaCakes118

Files

fa2bec2aa0ab30b1d36408d472a1b6b8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\da320a10\f1e6e047\App_Web_lbh4gbyc.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ