15d3f273106d7f3d42684273eac6cd6b_JaffaCakes118 | Triage

Sharing

General

Target

15d3f273106d7f3d42684273eac6cd6b_JaffaCakes118
Size

726KB
MD5

15d3f273106d7f3d42684273eac6cd6b
SHA1

0b7ef44fc7668060d93acd4efb14c0b84ef47840
SHA256

57d0ab62082b88405f04e6c5e7e075fbb6e40cf8caa0ad0794be5b9f90d5c65f
SHA512

c63ddf0222cd00a7e6b35619588df75502c96d92ff8e373aa583a17920326aacfbd98c0af315fc9bd537efd2470d20dc8b1ef650028a58b3f34d7ff25a78da88
SSDEEP

12288:CTbE76QINzm9CRknu5Uki/OZRGoOK+gJf86QCpKN7Z:NKFRknuy/KM1N7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d3f273106d7f3d42684273eac6cd6b_JaffaCakes118

Files

15d3f273106d7f3d42684273eac6cd6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Gogy\Documents\Visual Studio 2008\Projects\Client\Client\obj\Release\Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 721KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ