0ed954bb151fd023f2f954516f677249_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ed954bb151fd023f2f954516f677249_JaffaCakes118
Size

132KB
MD5

0ed954bb151fd023f2f954516f677249
SHA1

f5615936f82c2068f76c42aa97210da142525695
SHA256

8980e011564bff6f69fcb93c64bf980270808be8da9719faf48565bf8320b918
SHA512

faf7e1e813312341d64a01dfc23a438f1a2b9764b800213fef7d14bf6afdf28c8a08944ba65aa895b08e787d6a93269a1f9ae3f62372de526d0ad688ed20815d
SSDEEP

3072:SDxwCjaYI4RDbOOm95NYmyGQoIl2g/2pJC3MqRlzoI7h+aS1Gq:SDSYI4IOmXmGQoIl2ZpJYJzo0naGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ed954bb151fd023f2f954516f677249_JaffaCakes118

Files

0ed954bb151fd023f2f954516f677249_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\MaxwellLin\桌面\巨曜\NVCameraControl\NVCameraViewer\NVCameraViewer\obj\Debug\NVCameraViewer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ