ebebfa510a5880661dfbc8db7defef0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebebfa510a5880661dfbc8db7defef0f_JaffaCakes118
Size

79KB
MD5

ebebfa510a5880661dfbc8db7defef0f
SHA1

a26ec160f9c4caeef98b58c6b5edda40f91f632a
SHA256

67c8ce3e6602d23e660a0eee800649bbae58361e82418b6b102e0bb9f36b9570
SHA512

44aa92defdeee8f41cd0b5fe79add8431c488b4b3aac675f5c4e3f8d0c153e9f9e15e93949104f0eda97f195e0860117a068aa72ef3760c1518c590c8ebb3d2e
SSDEEP

1536:IQAZBZukGkng+uWEiz1zXrjm4YJORT8S:InfZjGkng+ie1zHm4zT8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebebfa510a5880661dfbc8db7defef0f_JaffaCakes118

Files

ebebfa510a5880661dfbc8db7defef0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Windows Update\Documents\Visual Studio 2012\Projects\explorer\explorer\obj\Debug\explorer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ