f3ce37aac222511850cf620022b85562_JaffaCakes118 | Triage

Sharing

General

Target

f3ce37aac222511850cf620022b85562_JaffaCakes118
Size

69KB
MD5

f3ce37aac222511850cf620022b85562
SHA1

d498658d3f0905b80f9a834dad01ce73aecc6c3e
SHA256

0fbd2270383b959d5b97e483b42930ad8ba9a56ab80210556cf295cbc1e61a76
SHA512

0e4f4ccf601ecab7fa4045018f0f14128aa93d476104d533086de209d9029fb8be0b6160be8aa8ddf0b8b499fa2506a4a1a34e7c04a6d941777450867bf43ad5
SSDEEP

1536:XmoFTLo/Hb0kT/2Dx3+lenTTcbJ6iM0Z2f3U:2oFT4Hb0YA+lsTT+J6itZI3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3ce37aac222511850cf620022b85562_JaffaCakes118

Files

f3ce37aac222511850cf620022b85562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vb.net2010Projects\SoarPublisher\obj\Release\SoarPublisher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ