fb331efdbb0520c7ce42b6271d73e192_JaffaCakes118 | Triage

Sharing

General

Target

fb331efdbb0520c7ce42b6271d73e192_JaffaCakes118
Size

53KB
MD5

fb331efdbb0520c7ce42b6271d73e192
SHA1

fa5dd81949e0d180ec30828ae349e20da51609dd
SHA256

2b44f01444d7c0706d79cfb088fff45b0f3d3a8ab8096060c8f0362460785dec
SHA512

2f937c9c636229bc835d7772b013b0f558c0212fcc2f2716ed23e69136ef2cbdba04f1cdf99b5fba903f19659de35a902196647e996524d1450c86e41e1d1def
SSDEEP

768:r/UUwTBzQJyJXynPO3l5/I+GJS2IrW2whW0qSLg4eZNTDSZ2ieBc:r8UUB8JMoPO3v/I+kS2fM0Hk4eJil

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
fb331efdbb0520c7ce42b6271d73e192_JaffaCakes118

Files

fb331efdbb0520c7ce42b6271d73e192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\أبو ايهم\سطح المكتب\shadyahdah\shadyahdah\obj\x86\Release\shadyahdah.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ