fd418ea6b64c8ca127673632fab26337_JaffaCakes118 | Triage

Sharing

General

Target

fd418ea6b64c8ca127673632fab26337_JaffaCakes118
Size

122KB
MD5

fd418ea6b64c8ca127673632fab26337
SHA1

a5162a43120291c26544c31d627f9a54498cf2b6
SHA256

771da53f904b92b34ffe12e19ae709bf67990c2caaaa4a0689f027288d4683a7
SHA512

60f09cee9a8628ded8ee568aa75bf07e241a92685720aafae9e5dd8fff2f1e811e3532c665c87f27c7f1882f01a6ad6f79d27d9aff073dbdc510ab79a27b0f53
SSDEEP

3072:hW3OjCMDeYnKu5Oq1X2r4/JVFBXx4ydV:mOjeYKmNX2r4/JVLXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd418ea6b64c8ca127673632fab26337_JaffaCakes118

Files

fd418ea6b64c8ca127673632fab26337_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\PortLA 2008\PortLA App\MPEGLA.PortLA.BusinessServices.RoyaltyAllocationEngine\obj\Release\MPEGLA.PortLA.BusinessServices.RoyaltyAllocationEngine.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ