227cd4e258a2395068f878957819143d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

227cd4e258a2395068f878957819143d_JaffaCakes118
Size

739KB
MD5

227cd4e258a2395068f878957819143d
SHA1

73b2ac65c5f1189ab6cf18ef5c661b4f9c9be311
SHA256

7e772f03df4442862a9cc04c2f6d7b6730f5a2bedfeba8fdc085dd69706fdb8f
SHA512

211aee06fa793fc7e5bcd5c88eb19637cbe9c658decf3aea044b9f2e970c87ad67c5013ec2f9223599c06425c1a7f213f8c2279fbe8c6973c1690c5a87ed088b
SSDEEP

12288:y/Mu1/MuwEg1RqZdu9M/MuD/MuQJ1XTDH3HJ6M9:3uCuwxRquhuQuQzPH3Z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
227cd4e258a2395068f878957819143d_JaffaCakes118

Files

227cd4e258a2395068f878957819143d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tony\Documents\Visual Studio 2008\Projects\Virus Maker Lab ( ItsYourSite )\Virus Maker Lab ( ItsYourSite )\obj\Debug\Virus Maker Lab ( ItsYourSite ).pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 374KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ