17dd1560d77077fab5138fa37b151e10_JaffaCakes118 | Triage

Sharing

General

Target

17dd1560d77077fab5138fa37b151e10_JaffaCakes118
Size

99KB
MD5

17dd1560d77077fab5138fa37b151e10
SHA1

0a7c373c225eb9b070c5f72f1ed54ce4c830389f
SHA256

93c9505d085fe0322b513893b96ec2a67f554d05341c39bde9e282170b68fd2e
SHA512

1b0296b08e27ad87e42d6f3296d2780abd83d29fb66eaab1621c07222c8a9804c3e9c111422426a5def94da3f74901d1677e8b6abed4584c011c8fc35721a9bf
SSDEEP

3072:rBoCDcPDoNNx8UZgEtk7FVibDJxPmreWUdk2CUoX8:KPDoNNuUyEtSVixxurrd2ks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LOIC.exe

Files

17dd1560d77077fab5138fa37b151e10_JaffaCakes118
.rar
LOIC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Visual Studio 2010\Projects\LOIC\trunk\obj\Release\LOIC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ