653fbb797f473b4ff145a90371afe969_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

653fbb797f473b4ff145a90371afe969_JaffaCakes118
Size

17KB
MD5

653fbb797f473b4ff145a90371afe969
SHA1

b9ddd3845717be3798cf30dbe3bf0eb1b7515c5a
SHA256

93a072db3ae7b91be7f965bcadfe753f574b308ca4513390b3bd7393a980d02d
SHA512

1fabd53fe2d51e5d339fedbe4d8cd4979d73c4fba73be9d88b181e4c66757a407b86a6576b43f9d97b455497187d47df70c85b40a75f3f4b2afedad9d6682e42
SSDEEP

192:ma+bKV6l8qiEpn65M74BO1PXNsSZAgwY+uMr/t1/YKkO7GG6iF3VVwJkglnVSzn9:K7uOpXNsSZnwlV2KkO7GG9wZbQcCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
653fbb797f473b4ff145a90371afe969_JaffaCakes118

Files

653fbb797f473b4ff145a90371afe969_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\PortLA 2008\PortLA App\MPEGLA.PortLA.DataServices.Contract\obj\Debug\MPEGLA.PortLA.DataServices.Contract.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ