e9079cef7e1593c969703a5779e23703_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9079cef7e1593c969703a5779e23703_JaffaCakes118
Size

17KB
MD5

e9079cef7e1593c969703a5779e23703
SHA1

043ceb850e57cb940b5a5fdd84ac5f8c72adcd1f
SHA256

fe5f185f8f81b2669c6453166fac7c0fb2af68841259c1481c4b5c1d10a191e3
SHA512

d8c55c0eb663177b6505d9a044280854f4ef8ca0ea69c0d29818082089848d26f15b013a86788b2042b0ca9e400b4ee97e57b39fc8913ea6df75c3ae5e470dce
SSDEEP

384:fKepeOwxBbDjB7PObLf45fSQf3O58ZNpL:fKepeOwfbDjZGfonN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9079cef7e1593c969703a5779e23703_JaffaCakes118

Files

e9079cef7e1593c969703a5779e23703_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dokumente und Einstellungen\bigxxx\Eigene Dateien\Visual Studio 2008\Projects\Updaterdllhack\Updaterdllhack\obj\Release\Updaterdllhack.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ