1c73438e1355cf3ea4e72f0fc691387f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c73438e1355cf3ea4e72f0fc691387f_JaffaCakes118
Size

1.6MB
MD5

1c73438e1355cf3ea4e72f0fc691387f
SHA1

d65118be8fc3b2909722e958bb391e568d892335
SHA256

0d480b08d9032f3b2d53d14378bbfbfbec3a88196691ea71faec187fd83a3814
SHA512

8271cd99d86552579603b91c1281b8ec2703b7d219c41c0e117d6c637cd37b72dc43f6bba4406b089e7c57e421f56144f12300d819b6861b0bd524312a937791
SSDEEP

49152:Lenn9b8VZxZ2XKJuGv2u4Fc9pz9gL/kS:6x4Z7mcW2zwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c73438e1355cf3ea4e72f0fc691387f_JaffaCakes118

Files

1c73438e1355cf3ea4e72f0fc691387f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\nosferatus\documents\visual studio 2010\Projects\smss\smss\obj\x86\Release\smss.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ