17d5d54ed4f575eb800503e27c5df13a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d5d54ed4f575eb800503e27c5df13a_JaffaCakes118
Size

12KB
MD5

17d5d54ed4f575eb800503e27c5df13a
SHA1

0cabafab1ae303bb02a41d1761c5affbcba23211
SHA256

d6a9a5058f42712b88f43491bef26c1c5b677086d0b246235a609d829cc76a89
SHA512

2c6e0d3d2c72e6e2b27e99c981694baee3c0d5746aae593b05156cf3fbe14642a61375a55a273a5bb0491a4364a387b6c0f19d05746341f3fa7f4b8cb0a85451
SSDEEP

384:+nokwjwAnD0LVwAnD0LnEuHSEzUtm1N6YLLHcQr:70Lj0LECotmb6Yk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d5d54ed4f575eb800503e27c5df13a_JaffaCakes118

Files

17d5d54ed4f575eb800503e27c5df13a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\Socket\MatrixPlatform\Samples\Matrix.Common.Sockets.BasicServer\obj\Debug\Matrix.Common.Sockets.BasicServer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ