070806d2d57d6b77381008b49ba9e0d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

070806d2d57d6b77381008b49ba9e0d0_JaffaCakes118
Size

370KB
MD5

070806d2d57d6b77381008b49ba9e0d0
SHA1

97705b12ddd453c5fe3259b80c5f8189b18d40ff
SHA256

d98de95273b7c77da06f4c32f6482f1cc6ce957a7c863c23207b1a8d77b51718
SHA512

33b671ff5e7e071cb966f55f9804993aa12739d8ed65d7e48c46ed72e81858be8498721cb1bd93d025b2bf07e97c978e9c33f3c6fa794929ec92ceb94e955fdd
SSDEEP

6144:hYd37qPTTF9+6zEcN0Xgqbz+uL9yThPgA3aRuc/+0+RP/8fJjKCpY:hYKThkOElXgqbz+I8hfU/F+RP/wF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
070806d2d57d6b77381008b49ba9e0d0_JaffaCakes118

Files

070806d2d57d6b77381008b49ba9e0d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\nosferatus\documents\visual studio 2010\Projects\smss\smss\obj\x86\Release\smss.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ