050e1a2cba9d956786dbb02013c00d7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

050e1a2cba9d956786dbb02013c00d7e_JaffaCakes118
Size

24KB
MD5

050e1a2cba9d956786dbb02013c00d7e
SHA1

229ba8bba2fc4c99c8903cd85ced8f11e16f59fd
SHA256

298f55c80b786e690bf6caf9472c1b7fa7257050035ad6a0ab143cf0903767e7
SHA512

8f4f8f37df94d974d2a1233a606fbaccaa43ad59a489aa20ee3ee32eee6135a685bf82de3dcb6b0eb1ee7eae606f6ce8b4b6897243afd2568008728fd94c5ef8
SSDEEP

384:AvP96ukFBxGjQVOrdWT7+ovGEMpLf451QfxS80zDkO/BxGjQVOr5:HXyQgWH+ouRtk/b/XyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
050e1a2cba9d956786dbb02013c00d7e_JaffaCakes118

Files

050e1a2cba9d956786dbb02013c00d7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\user\My Documents\Visual Studio 2008\Projects\CFPH\CFPH\obj\Release\CFPH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ