9ea760312e176f824ec01e8418a01ab3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ea760312e176f824ec01e8418a01ab3_JaffaCakes118
Size

793KB
MD5

9ea760312e176f824ec01e8418a01ab3
SHA1

27b16df7a32ba5d750f6637701665e97c9e87fbd
SHA256

e8e1fc9dfb6b7aa77843740b9c7380487cbd824ec317d4d020ac3020fe58b4e4
SHA512

3f6886745de08e39d6d23e20dbc4b02310dadab66ea69cbca24e3feafcb27a4ba1611643b3ca719f9a57e31f4b54b89f3fbc2003e9b00420958d7e1f61daa09c
SSDEEP

24576:VqN4NXw5tLAM/Vqp6fcGN3iF2oBtZp31:VqeCL7dq8fQF2oBtP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ea760312e176f824ec01e8418a01ab3_JaffaCakes118

Files

9ea760312e176f824ec01e8418a01ab3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dink\documents\visual studio 2010\Projects\ParentalBlock\ParentalBlock\obj\x86\Release\ParentalBlock.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ