13b231a62188b219dc52bf40d508fee4_JaffaCakes118 | Triage

Sharing

General

Target

13b231a62188b219dc52bf40d508fee4_JaffaCakes118
Size

257KB
MD5

13b231a62188b219dc52bf40d508fee4
SHA1

a16d4340d21221e7f116601f1dacf9d7200c1647
SHA256

eaad06d151e26c6a3f583f08ac8340ae33470dbb522007b40d525a66c24c75c3
SHA512

f89bdb106c608fd257a280d60b215ab7b3d1d04bcba944819a77967b26c5e8256656cd23011aa9f1c633c7e3b9de18e7ba5cde25b666056a157f80bb74fd9db2
SSDEEP

3072:kjS7WN56L6/V9Q8W75kNw/U/Joe+i0CpL8mwkdc4S6QnMiFql:kjnN5T/V9ZW75k6UR3Rwkdc4S6q/q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b231a62188b219dc52bf40d508fee4_JaffaCakes118

Files

13b231a62188b219dc52bf40d508fee4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Userr\Documents\Visual Studio 2008\Projects\lol\lol\obj\Release\lol.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ