04cfeb9db4f9b268ff72dc0682f7a6cd_JaffaCakes118 | Triage

Sharing

General

Target

04cfeb9db4f9b268ff72dc0682f7a6cd_JaffaCakes118
Size

15KB
MD5

04cfeb9db4f9b268ff72dc0682f7a6cd
SHA1

620a5182213178b2b6ed65f99e2e61ecaeb43e55
SHA256

b0136c952b5450078d1363223e3b9d104f99055caa9f37a57bb525d454e90cd0
SHA512

2db3d9443ae3bb7993f385762a1817c2cbe16799dbc0071f837bbe093a40da38f3a0f7d2e2c093eef17fe7faf17c7053d531f985d9def6f9c8a4d4195ab39121
SSDEEP

192:oFNfFrnTxKI8NeM4Hv5KzCUO7pidVfvR7Q1kLg8gbqtfronJNSvX+RoiFzFrVYIR:sVJTApY9RKW1idVx74kiqaJNbBzb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04cfeb9db4f9b268ff72dc0682f7a6cd_JaffaCakes118

Files

04cfeb9db4f9b268ff72dc0682f7a6cd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\PortLA 2008\PortLA App\MPEGLA.PortLA.DataServices.AllocationSummaryBatch\obj\Debug\MPEGLA.PortLA.DataServices.AllocationSummaryBatch.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ