b697722153f20bc7e64d3cee45513ba9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b697722153f20bc7e64d3cee45513ba9_JaffaCakes118
Size

8KB
MD5

b697722153f20bc7e64d3cee45513ba9
SHA1

7ffa78b15bdfcc8995ccdfc4e85ee288c43a60f8
SHA256

7506047ebfdf6acfa97a842ff6523201304c5b5d873a7a2b3bb466bc99cd0131
SHA512

9e82aea7c42bfa9829abce0fbf1a915cd8403405da77602919f3f304439f99d547e7aa5fcaed79dbdddecf55a33717dc016f4677f681bfd973cd23b06816fe66
SSDEEP

192:AccOv8/gDihHDqMk0qXyP2fSNQSUXNKo1BnwjZwCLeXinRZb/DUPm:T6fUXNKo1BwjZwCLWinR9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b697722153f20bc7e64d3cee45513ba9_JaffaCakes118

Files

b697722153f20bc7e64d3cee45513ba9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\PortLA 2008\PortLA App\MPEGLA.PortLA.BusinessServices.Installment\obj\Debug\MPEGLA.PortLA.BusinessServices.Installment.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ