01c7940b072618c0fa0e7169d218f2e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01c7940b072618c0fa0e7169d218f2e9_JaffaCakes118
Size

215KB
MD5

01c7940b072618c0fa0e7169d218f2e9
SHA1

51b23da9cd69b1ec66a1fdb9cb522038f4257950
SHA256

55800df8ed1025a7f0f00eaff3fe2b9ad17e6ae218c06cc82d5daf41c782c328
SHA512

d3f3d9da2f528716466c4f5c87b0b8b9b6b68e594cb0a2cac197c3db7314b3a6096c54c22c9b146b223059e12d011d859d61e3620196cd17b941491846dd5716
SSDEEP

3072:cIEc3FqKN/RoZ4+33AN9H4XYc9WBn54DVbsF:/EKNpd+33Avs7W57

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01c7940b072618c0fa0e7169d218f2e9_JaffaCakes118

Files

01c7940b072618c0fa0e7169d218f2e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\sami\Documents\Visual Studio 2015\Projects\Dts\DtsSound\obj\Release\DtsSound.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ