07aa655b2a4ac81f1025b7302af07b34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07aa655b2a4ac81f1025b7302af07b34_JaffaCakes118
Size

332KB
MD5

07aa655b2a4ac81f1025b7302af07b34
SHA1

12d61b6b38f5f80cf507ee30d438fc9616f793cf
SHA256

cda6a25184fbb2c2d64cdd567dafb7f69c6197c0581b6cdf0086443fc22e74a8
SHA512

712a9f5e68d99cb19d93df55a8993e52996084cb1d4b8c1e94c47244e6f15857c8ffb678ed2001e5f9d86b95ed86624491876111d11a0fd4bb9fe527bfad98bd
SSDEEP

6144:BWJDdfptqgIxR7cROYvjlNR04E+JAeuH+H:BQdfp2v7oOYvBVuHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07aa655b2a4ac81f1025b7302af07b34_JaffaCakes118

Files

07aa655b2a4ac81f1025b7302af07b34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Owner\Desktop\Vezba\CR.Stub\obj\x86\Release\Avira.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ