bdf82d244e6a4d94112c4793f61b49bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdf82d244e6a4d94112c4793f61b49bb_JaffaCakes118
Size

12KB
MD5

bdf82d244e6a4d94112c4793f61b49bb
SHA1

ac45ee8acf9a0c875a2801c3543bfdfc5e2e6777
SHA256

7792c5a14009eaf9cd39f8a4253dca3ef1b53782baad1c37b23842b32dcbd1d9
SHA512

6a09757b2834e70a750d68f184318cfa9a6430a816c347296f74d83b7c6bcb9516266ca5e7f4ddc24549dc59a9d9dc157466f1c9bc54305b1ff417d64816a71c
SSDEEP

192:oKX8PajXaBPPLWbRqp+cmLs8f6YNRvCsNYBgotfOLqLvUL7mL:oKX8P0XIkRqp+cmLi0ssNYBgQ0Yvq70

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf82d244e6a4d94112c4793f61b49bb_JaffaCakes118

Files

bdf82d244e6a4d94112c4793f61b49bb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\PortLA 2008\PortLA Admin App\MPEGLA.PortLAAdmin.DataServices.Invoice\obj\Release\MPEGLA.PortLAAdmin.DataServices.Invoice.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ