e87989535b091f613aff0c05d7a5890d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e87989535b091f613aff0c05d7a5890d_JaffaCakes118
Size

237KB
MD5

e87989535b091f613aff0c05d7a5890d
SHA1

23ba2d3e40e2600c0a08d57679df889b2f6a5f48
SHA256

902bfada2b865bd0599b5cac9fecc1236ee7b1736524758fbd3d4f779e3496fe
SHA512

2cd64b371dc5580496ca9dcbcf56340491afa2d4d1ce19891f7e029a57b688e9309fc1de5c37db5069616e697af34ad4fd67100e6f5269472443ba7797ca2092
SSDEEP

3072:YGKROS5fkMLalsplF9YxKROS5fkMjWuQq:lKRlfdLQsZ8KRlfdzN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e87989535b091f613aff0c05d7a5890d_JaffaCakes118

Files

e87989535b091f613aff0c05d7a5890d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Documents\Visual Studio 2008\Projects - 2\Server Undetecter\Server Undetecter\obj\Release\Server Undetecter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ