0c341d884a7068e6e5af136792e4c195_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c341d884a7068e6e5af136792e4c195_JaffaCakes118
Size

513KB
MD5

0c341d884a7068e6e5af136792e4c195
SHA1

2844319e2cdf39f273fc90c95efb1fe558734648
SHA256

05e2a885eebbe59c96c6923113c1dad46b8b77e43513c346fe66fcbfb1e91b7f
SHA512

1412b9a29776b9c4e064a160b05a6e4835f94731cca06454774bbb31b8ed16e7f106224ef3727a83f03fc967d58b25a8e01118a0280a16fe4979ee525cd7774f
SSDEEP

12288:MNYidr+tOd+eKJ3k8YMknmpx7kijYUjbD:TAatJeDhMk67kijH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c341d884a7068e6e5af136792e4c195_JaffaCakes118

Files

0c341d884a7068e6e5af136792e4c195_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Slichice\Hakovanje\[2010] Hakovanje\Ecryption\S-Norton5\obj\x86\Release\Service32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 460KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ