fd7cb607b619ee6416ac1817d0ca3185_JaffaCakes118 | Triage

Sharing

General

Target

fd7cb607b619ee6416ac1817d0ca3185_JaffaCakes118
Size

300KB
MD5

fd7cb607b619ee6416ac1817d0ca3185
SHA1

a8b3fe209796904dccfb6a7f27df35fb429fb8e1
SHA256

607e1421b0c91cc3fa822c24d3415efe1d00765f4c6e3add21b115908a50ba75
SHA512

42d6d9badae13583569c4aca276d916b0dd09d6ab3f4753d429f87e5abd1d9a73a174bf30783474cd30c46a3990e796534c795eb297284d67004373ba97addae
SSDEEP

6144:n1luCpTpwMsV4Yz1Z37ZCJcowHO/ibzmYNKTwDa/Q1l:n1lXaM6hTNyvoKTwDa41l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd7cb607b619ee6416ac1817d0ca3185_JaffaCakes118

Files

fd7cb607b619ee6416ac1817d0ca3185_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jack\Documents\Visual Studio 2012\Projects\Gemini Checker By PJ\Gemini Checker By PJ\obj\Debug\Gemini Checker By PJ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ