e7d8c9ef8a9dd2c80574799ce1b81697_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7d8c9ef8a9dd2c80574799ce1b81697_JaffaCakes118
Size

277KB
MD5

e7d8c9ef8a9dd2c80574799ce1b81697
SHA1

3778aab8af400bd5d390d3a5e1190b085b280379
SHA256

09363e0efdea54c1c8878f0a7d1c5ef696309328ff9da8223abdaa81c20a887e
SHA512

c00c7e97f1117cacf2d749981789d5d9380991e16e397ff47a4f9df917c5f9243e3ef4cb4f7f2cf50839a9f3390d24055c285f41d3fe5533d6297d6e1dbbfd5e
SSDEEP

3072:lrWg6DgCHlG0ufU48aRi0Wn+WOfrQiG6igDyHcGje81j5wfEKw5Aak4GTiFrhE:plcvF4fU486isWh+VnGa81jGf8Pl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7d8c9ef8a9dd2c80574799ce1b81697_JaffaCakes118

Files

e7d8c9ef8a9dd2c80574799ce1b81697_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\abada\Documents\Visual Studio 2013\Projects\win32\win32\obj\Debug\win32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ