425c6ceaf63d0e9c1ae4aa991bc75796_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

425c6ceaf63d0e9c1ae4aa991bc75796_JaffaCakes118
Size

52KB
MD5

425c6ceaf63d0e9c1ae4aa991bc75796
SHA1

7023b214071e0bd4b99f20e0cf7a0d63e4eef264
SHA256

801e20061e5a818b5b9806cfa1594d3d7e7522d00e56116ec79715aaafdf83d0
SHA512

95b636d1c9cf5e2e6737972a77442f629675f07012d0d6cb969f0c28e3dd91e48e80eb4ba2b5530d5abc974e95bafd71b6d73dc2eda04845f86ffc26a4d28f48
SSDEEP

384:wJX8iqGOiL+Lq2Z8GEGEGEGEGEL+LBBGEGEGEGEGEGEGEGEGEL+LBBGEGEGEGEGm:vPsB2ZASIOj5ROaQ5HOQjoetDLoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
425c6ceaf63d0e9c1ae4aa991bc75796_JaffaCakes118

Files

425c6ceaf63d0e9c1ae4aa991bc75796_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\XMLDoc\XpathNew.sln\XpathNew.sln\XpathNew.vbproj\obj\Debug\XpathNew.vbproj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ