233c0885a75c07694c7b0fa767491d11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

233c0885a75c07694c7b0fa767491d11_JaffaCakes118
Size

955KB
MD5

233c0885a75c07694c7b0fa767491d11
SHA1

e780526014caba76903cd359bbb1352041d92fa0
SHA256

638ee0a533913be2c88d52662321f2fff8ed6227772c4040d69e3ad6803fc59d
SHA512

e514946ee2e7387acd8ad770867053eef0e286335fb4be64c3f23038b797a9bfe67f7f60cfa2403f48599412ee6d107fbd3fc900e2af5bd7f091d72f576d4b35
SSDEEP

12288:IPbpQ6atS6qBBak6ODYtyN+LAKCTGi9DjkEOUJzBlR73u1e8k:QQEBBf6OIyN+knK8jkbUFBq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
233c0885a75c07694c7b0fa767491d11_JaffaCakes118

Files

233c0885a75c07694c7b0fa767491d11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Current Crypters\2012\WindowsApplication1\WindowsApplication1\obj\x86\Release\Services.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 890KB - Virtual size: 889KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ