19fd38f184697d852a6f6bca582f55d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19fd38f184697d852a6f6bca582f55d2_JaffaCakes118
Size

19KB
MD5

19fd38f184697d852a6f6bca582f55d2
SHA1

1ff9c89e17a4df1a11673be819e46d56c3f53475
SHA256

75e30a5499faf8c18e300f7c34e22f8cb89b1f1b8d4f61ccb8139e54d16d8cbb
SHA512

a2a6a87d010a7ee554a2ff7da7fbd9f7c2c7becb9544a82922c7fef387fb2d78335cf28ec435178c53e9f63bff3e17e29198cc63851dc8d2829a38fd7662f8c1
SSDEEP

384:HTJ6iPLa8ahxlLKAD5s+hXfvvAMfcV/L3rIfGECdy9uRZrXQ4WkWT:HcDpDE17rI+5IH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19fd38f184697d852a6f6bca582f55d2_JaffaCakes118

Files

19fd38f184697d852a6f6bca582f55d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\bbridges\Documents\Visual Studio 2010\Projects\IndexMedia\IndexMedia\obj\x86\Release\IndexMedia.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ