b619c7c14ed60b643fa48599fd099685_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b619c7c14ed60b643fa48599fd099685_JaffaCakes118
Size

19KB
MD5

b619c7c14ed60b643fa48599fd099685
SHA1

c18a9641925334a5661bbcb63833dcafcf1ab2ba
SHA256

961471935e25306a5b6016624b42be13e2ae52d8aa2a8dd3ab05fadff49c96ce
SHA512

70215b33cae1ab18ad7b7b5a39ae168d55f52d047c4e2bcad817c58b888d788dc234f9506544bd275f16650a5b45817a7356c1b68cab1d0aac8c7d7ed1da4611
SSDEEP

384:beivin3TgqHxkVO42xoWsL724jcPl81+dNORMTYY06gVJ0:bJvgkxwoWABcPqvbz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b619c7c14ed60b643fa48599fd099685_JaffaCakes118

Files

b619c7c14ed60b643fa48599fd099685_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Matt\Documents\Visual Studio 2008\Projects\Downloader\Downloader\obj\Debug\Downloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ