9d7c6dd4b4f974b364f420ba6bbe37ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d7c6dd4b4f974b364f420ba6bbe37ad_JaffaCakes118
Size

91KB
MD5

9d7c6dd4b4f974b364f420ba6bbe37ad
SHA1

cb3a312f5b970b1a53d4bea015cde04a96411454
SHA256

7add45591ced327d223b372d36859ffef21af92631248e2c484e55cd0264e33f
SHA512

e3c5f9d45b7402cd9256a618ec2b60707ca39746dbf0dc087430994c97364e1bdd29a8866e7139e454131b4ff125b5a91d1708e8cc6851051472450c12610996
SSDEEP

1536:xO7YLqIeO36yPilYxUqqnm7RqN//4WXPeD7:xOcLi4sYOqz7Nz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d7c6dd4b4f974b364f420ba6bbe37ad_JaffaCakes118

Files

9d7c6dd4b4f974b364f420ba6bbe37ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\rc\documents\visual studio 2013\Projects\WindowsApplication154\WindowsApplication154\obj\Debug\WindowsApplication154.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ