296325ec7c87159c9258e6363557bda4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296325ec7c87159c9258e6363557bda4_JaffaCakes118
Size

259KB
MD5

296325ec7c87159c9258e6363557bda4
SHA1

e8e4ee5b43c56bbd44984e39c4d5e18ed597f41b
SHA256

57ac10eb521c1f40df9696a738532dc36b568ebaf02cc15de2ecf202cdc99627
SHA512

2fc61d138db17e50fb5e360b1022aa19c14140c809a2eb4847718857d6aa2e90685657c856173c6a1a793a29d96853da6ee493b1a0a00597b0202f4242bd1a87
SSDEEP

3072:hp5lBnWUcf2jLGu9A7sfaC/fPlwwTbWbm6yh3ygFIfiDcM8nV/LjcTcKAJcLc6SD:hpJcejLGu9A7ROnLXWbACgFIiXtyth/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296325ec7c87159c9258e6363557bda4_JaffaCakes118

Files

296325ec7c87159c9258e6363557bda4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\dillo\My Documents\Projects\WinTEQC\working\obj\Debug\WinTEQC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ