e98bda93c7c0d3213d8d3326d28ef841_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e98bda93c7c0d3213d8d3326d28ef841_JaffaCakes118
Size

21KB
MD5

e98bda93c7c0d3213d8d3326d28ef841
SHA1

e7eab11f4490e36cfa6e25b7de4826e0859bd3e1
SHA256

6fb96b56ccab601c0a93f772950941bd0499606a9b36bd93c418419bfa9452dc
SHA512

0b1c000f2644f644398beead33a13e71e10f6c2318a1192751bf837e8f27e2e1c3c8267b3aff547628156a9abc2b918c2429a104967dc36925cddfad8f9e3458
SSDEEP

384:IJdEqP7AfcVkTYKZGZ9Sq1+unz3uML724jcyii1+dN7/p+9WsR/ni:kdEq0aKZGZMc5TugBcrI9ha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e98bda93c7c0d3213d8d3326d28ef841_JaffaCakes118

Files

e98bda93c7c0d3213d8d3326d28ef841_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Roby\Documents\Visual Studio 2008\Projects\Web Browser\Web Browser\obj\Debug\Web Browser.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ