f39eed7cd3cc532f691d744f6b08292e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f39eed7cd3cc532f691d744f6b08292e_JaffaCakes118
Size

179KB
MD5

f39eed7cd3cc532f691d744f6b08292e
SHA1

ad79fa7256a40a93c9680511810e3a6882886434
SHA256

dc8b94842fe0c6c351f15431cd7f54cec5d375cc31f23c6f7f53beb853961541
SHA512

4d2d08602504adc549a6e63627acb21204d5adfea94a3e9d13564af771e167261e69a07a11e6ccf90078da99e83e0663c1da6d73eeabc202aa96a0b5d82c7d07
SSDEEP

3072:1Ck5USRiguSsvs9VB6LXBIBBNQd1Ymw/WVHGzzqI5:359wddU93KIDQYzoGN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f39eed7cd3cc532f691d744f6b08292e_JaffaCakes118

Files

f39eed7cd3cc532f691d744f6b08292e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dermot\Documents\Visual Studio 2008\Projects\VistaVoiceFix\VistaVoiceFix\obj\Release\VistaVoiceFix.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ