072388ac07904b3690c30b95ddb939c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

072388ac07904b3690c30b95ddb939c1_JaffaCakes118
Size

91KB
MD5

072388ac07904b3690c30b95ddb939c1
SHA1

a3679054183851ef3982a1869f29e78ce7180059
SHA256

96cf191ee8837fcde31d904225825de2af7aaade1a515aad69b94a7c5afce186
SHA512

feb5ff1f5384adbecb0b6eabb48c99a85d908b684b86846eb6797b38cba2e7a4c22466b1dc23f8a56673ee1265fe7bcc6c42a93316f8852bf405dff9d03ecd59
SSDEEP

768:mdNeEqy5uEZMBRqu5mgxY2xEnUGykdFXbbCyg/B1zi+vFzFb0NeEqy5uEZMB:2p5XUR/obnUGykdVXWB1ieRgp5XU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
072388ac07904b3690c30b95ddb939c1_JaffaCakes118

Files

072388ac07904b3690c30b95ddb939c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vb 2010 projects\Przytnij\Przytnij\Przytnij\obj\x86\Debug\Przytnij.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ