fbcab50ec02f19b543a3a29ed1df9425_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbcab50ec02f19b543a3a29ed1df9425_JaffaCakes118
Size

601KB
MD5

fbcab50ec02f19b543a3a29ed1df9425
SHA1

0790a0ef436aa8351dc0e37889f6f995e5b896b7
SHA256

b85b0ae080be1560a73688bb58a943aa2c4250d57aa2492d00cf3018f530e9eb
SHA512

64955641a17ed08a2801ce17d8749e525d05f1ef6bcb54c61c185e6476456037bb1fde99dbdfa74b957dc31716fe5742b72c7d0370d079bd38bf1ca3bf53b740
SSDEEP

12288:ZbomOkmSemqdzZbOys2f+2/uN9o+TS0itdwPfqNh2EB+:ZleZlns2f+NjocitdxUEB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbcab50ec02f19b543a3a29ed1df9425_JaffaCakes118

Files

fbcab50ec02f19b543a3a29ed1df9425_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dhivin\Documents\Visual Studio 2013\Projects\red\red\obj\Debug\king.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ