fb9463f875bead479670038494544f60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb9463f875bead479670038494544f60_JaffaCakes118
Size

9KB
MD5

fb9463f875bead479670038494544f60
SHA1

2c3740de0fbe14796d592e64f9111fe0fd63e43b
SHA256

37060bb669eaf53da64ddda441defe50856543e87385ba28f91e62743d7479a6
SHA512

d6717cb2c575f6fe059e379f56f3f957ffba10354bcfcf313cbe740536b2e6f3d9a20c090e9e1cc6a5e30403a06af54d2e4135f53fa6dab017d40408782e3283
SSDEEP

192:rAGeEtS3ladCsJWO/Ie0UpeWPkJDK/3EXd:cGeEw83/HxQPgvEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb9463f875bead479670038494544f60_JaffaCakes118

Files

fb9463f875bead479670038494544f60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Can\Belgelerim\Visual Studio 2008\Projects\Messenger\Messenger\obj\Debug\messenger.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ