242f0cb4b37340e09e5298f7262eddc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

242f0cb4b37340e09e5298f7262eddc7_JaffaCakes118
Size

327KB
MD5

242f0cb4b37340e09e5298f7262eddc7
SHA1

37712646d01fc4e78b945953f6d6e7c50497e6e8
SHA256

c85de38c4cb682a8aaa45157d4881655de78ba3a286b15faa7e40c8d6493948a
SHA512

5ab86fd839a7bcc26845c04cddd8168ebc2e507cbc42449ca4693ac4c083c5926dddc24a0571539a273a5d6922284b87dd0c8a370c85511a315d167a33beec19
SSDEEP

6144:X4YDxOgpeAxy2sxnfQgcbImX613xHkNyyHYaA3OugdRQkIDAwsPpZhxRG6:L0iHxy2sxFcJG1kdHtA3OuuQkIDWXhxZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
242f0cb4b37340e09e5298f7262eddc7_JaffaCakes118

Files

242f0cb4b37340e09e5298f7262eddc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\src 2.2\borlo 2.2\JUpdate\JUpdate\obj\Debug\JUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ