fc239b6abe0a4c07a251e9141812c508_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc239b6abe0a4c07a251e9141812c508_JaffaCakes118
Size

247KB
MD5

fc239b6abe0a4c07a251e9141812c508
SHA1

26334e4e1937a9676e8157a6ce0961368608c523
SHA256

de234e51dcdb13d84e36faa5462b9934677015099413a06fb54f0ba4bf8a808b
SHA512

2a8ed74e34aaa9651fc997b95ba6d5f11f6236eb74cd462187d81a877706f1fcfc50b8cfdb81a0536cc037ff6835d063c02f7a6fa0e189a0740d6d65e3f03ce8
SSDEEP

6144:H1R0sPgL8mJD1fez2gdp1THFHkCz1GBT:H1R0sPgL8AD1eigd7zFHkCz1Gl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc239b6abe0a4c07a251e9141812c508_JaffaCakes118

Files

fc239b6abe0a4c07a251e9141812c508_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Toshiba\Documents\Visual Studio 2012\Projects\CLEAN7\obj\Debug\CLEAN7.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ