0c75469c6c8dbff8a3ef8d874e67f6a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c75469c6c8dbff8a3ef8d874e67f6a8_JaffaCakes118
Size

361KB
MD5

0c75469c6c8dbff8a3ef8d874e67f6a8
SHA1

a8a8f8816519593e1f5b4055dbc130bc61d32802
SHA256

15f2578625fa13156b1fcce504ac0ccfdcebd63384fb4f760c5c7ac5537bb1f1
SHA512

48c737baf3540ef638342579d1059193ce81fb40b0e4b35708455fd920e20b1dd44a8305e53be898492d77b6f8a748fa26e453f8dd2d81e1fb1a39ac986d5e15
SSDEEP

6144:GjUca5+gfpUOivRX9N79en584eeDXrGMUDMnYArVRkTCtaJppYWVM9:GYco+gunv179en24e8GMUWwTCEAWO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c75469c6c8dbff8a3ef8d874e67f6a8_JaffaCakes118

Files

0c75469c6c8dbff8a3ef8d874e67f6a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dpopit\Documents\Visual Studio 2008\Projects\Inekcija\Inekcija\obj\Release\Inekcija.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ