0073777bc856a0f20324d949ab3bf78a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0073777bc856a0f20324d949ab3bf78a_JaffaCakes118
Size

95KB
MD5

0073777bc856a0f20324d949ab3bf78a
SHA1

1c157deba1dec6e819aabca22ec61079a4ae6e5b
SHA256

076f6368448c38cde14942053d29e4b0fd8a8ab71afbad161820d6c79b0073f3
SHA512

40cb4e64f6dabd2cb4d6cc1ea2c50a75a7a7d513a5ecaf70efd6c12cd5d5271fba3bcd991fde9e1b53933eca368a4f469a8da57b463aab46d1229c498eea0729
SSDEEP

1536:SiVfEMdb6YrVXUdc9dtwJgR4EhEVtmG7Vng:GMd5r1UdfchEVtj7Jg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0073777bc856a0f20324d949ab3bf78a_JaffaCakes118

Files

0073777bc856a0f20324d949ab3bf78a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\256\documents\visual studio 2010\Projects\DeadBot\DeadBot\obj\x86\Release\DeadBot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ