0ad6b6a8549119cfa4d7110520533c41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ad6b6a8549119cfa4d7110520533c41_JaffaCakes118
Size

576KB
MD5

0ad6b6a8549119cfa4d7110520533c41
SHA1

d551d0a15d14681f3e3cb640cf7149a6e2140e8f
SHA256

1932dc22bd3f25986c71a2abf92eb541ce591b8f4e5e104a44fc2325907690ba
SHA512

69d9a148a6030e1ff38c4770d79dcbc7ededefffc6f633ef401ba6510e2c40c9eb49d9fdc914cc03e1aefb3979c6a9446fb1d6678e17f289610a0be4347738ee
SSDEEP

12288:h4HMZItFKPLFVQi6Po0dPJ87a3Cp6fiYqkINd1KHk:ICItKFVQ3Posm7ECpCzID1KHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad6b6a8549119cfa4d7110520533c41_JaffaCakes118

Files

0ad6b6a8549119cfa4d7110520533c41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\My Dropbox\VB Projects\Cp\notepad\notepad\obj\x86\Release\notepad.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ