0575ac2a69b93fa273967d0c6b6eef01_JaffaCakes118 | Triage

Sharing

General

Target

0575ac2a69b93fa273967d0c6b6eef01_JaffaCakes118
Size

269KB
MD5

0575ac2a69b93fa273967d0c6b6eef01
SHA1

3918be6f629d173a16ffcb28263236895964e7b4
SHA256

0f729863517a4c6ea018faf23d0c8725b9304a9e28cded6dc5a90e56adeec102
SHA512

a8a7750785e6930ae2624d2a7cb05cd95a306f5f932bb627e8a740c23e3e908d76ab16b265eb8bde673f3a726ffae97e4407f27396ed38f717f8ac1138f6a52f
SSDEEP

6144:jZB7lcH6DG/IxWDLXd43LI2rn68XXFn0V5a:jn7lcaDILXdaIa6e0Da

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0575ac2a69b93fa273967d0c6b6eef01_JaffaCakes118

Files

0575ac2a69b93fa273967d0c6b6eef01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Mercenary\Documents\Visual Studio 2008\Projects\FoX\FoX\obj\Release\FoX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ