19b12013eac4159eec5bbce25654e1ea_JaffaCakes118 | Triage

Sharing

General

Target

19b12013eac4159eec5bbce25654e1ea_JaffaCakes118
Size

766KB
MD5

19b12013eac4159eec5bbce25654e1ea
SHA1

5238020e8f7f3d6a25ccbe2d370b0eec30417151
SHA256

68018ce48372949a5e022610c8a4dc521cd5dc4c0f227322879c19159f5234b7
SHA512

56fcc5bb73ab93b08e0168e0d667edc2d84f64a47ae7ef6801f4e1c1bfb251ce081a92f073ab5432e527ad90f8f5c26db1d491ef9c057c2f605322e47271f309
SSDEEP

12288:9Zf/T/FTQJ5vfzvfZl/8x//3JiK1xuZf/T/FTQJ5vfzvfZl/8x//3JiK1x1gb:XHhTQJ5HzJlk//Zig+HhTQJ5HzJlk//v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19b12013eac4159eec5bbce25654e1ea_JaffaCakes118

Files

19b12013eac4159eec5bbce25654e1ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Karan\Documents\Visual Studio 2008\Projects\Pasted_Data_41aa.txt\Pasted_Data_41aa.txt\obj\Release\Me1004.jpg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ