e28a1aa83fc65e71ffe9d69184eb1673_JaffaCakes118 | Triage

Sharing

General

Target

e28a1aa83fc65e71ffe9d69184eb1673_JaffaCakes118
Size

36KB
MD5

e28a1aa83fc65e71ffe9d69184eb1673
SHA1

b95435cb497617d7c0531dec34225336740863b8
SHA256

69da8744ad999f42ff19882a0fcd881bc127b882d321781db3cc75c2d2978d06
SHA512

6e2b52101f11b4d4b6c89acdd4ef2337e8960cc771b5f500d3a87cd7a0d7e55057f020e8d45f20e654b550496ae5438fcb187cd58bbc97927ef0b88c72c07160
SSDEEP

768:xXfNmS9XEsq/l6g6T606/yGO9bsgbcG1wgBzgXfd+QY5QiDMbGhQMPwtP8:xXfNmSbq/I5+1/yGO9bsgbcG1wgBzgXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e28a1aa83fc65e71ffe9d69184eb1673_JaffaCakes118

Files

e28a1aa83fc65e71ffe9d69184eb1673_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\PortLA 2008\PortLA App\MPEGLA.PortLA.DataServices.AllocationEngine\obj\Release\MPEGLA.PortLA.DataServices.AllocationEngine.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ