487a6e1866177c3445d4308ab6f8e522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

487a6e1866177c3445d4308ab6f8e522_JaffaCakes118
Size

147KB
MD5

487a6e1866177c3445d4308ab6f8e522
SHA1

91c7d908e0643fbebd485d1feffe3327f0d716a6
SHA256

9b8388401fb4500846daee7b095be658cc56a0af0c44f1fffd9bd5680be5642f
SHA512

af19333897f8320453c32a2240c475b7bc0ad4d7ff53f4c78572c200d4d5f36963bda188019cbf190239262b27080ade768f85b175b8fd3529084388a7692e24
SSDEEP

1536:GIkrzniRjQozBxScV8Fd7ylXJAHLkF1QtdCSnWg4:UrEQEScVV54rtrWg4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
487a6e1866177c3445d4308ab6f8e522_JaffaCakes118

Files

487a6e1866177c3445d4308ab6f8e522_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\PortLA Website\MPEGLA.PLAWeb.BusinessServices.RoyaltyReportSumbission\obj\Debug\MPEGLA.PLAWeb.BusinessServices.RoyaltyReportSubmission.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ