253c4c7e876875318f54487de9a16801_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

253c4c7e876875318f54487de9a16801_JaffaCakes118
Size

92KB
MD5

253c4c7e876875318f54487de9a16801
SHA1

47fb769c5c2e022c65e94c7bb07555f623d3b0c0
SHA256

088923df98c6cc51194308321ffcc39dd553460eda42b94595cde22001bac11f
SHA512

80f6e95438c711b67a3ce4f7b1fc79b1236e4e2b44d1ec83df6e26277e94dffe3d64f70312b5171a5613dd31f75ea23557c82206d999200ac9819175a2b44cf3
SSDEEP

1536:7oe+3fFgptKPVgzUc4ahzKBoI9QRyLr596z92aMtoEVdrr5yxVBKO:43fi4VgzUcdKoI9QRyLr+z/soYdgBKO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
253c4c7e876875318f54487de9a16801_JaffaCakes118

Files

253c4c7e876875318f54487de9a16801_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Toprak\Belgelerim\Visual Studio 2008\Projects\dll injectör\dll injectör\obj\Debug\South Park.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ