25a3795550748cf9be999ad6b7a6bf83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25a3795550748cf9be999ad6b7a6bf83_JaffaCakes118
Size

79KB
MD5

25a3795550748cf9be999ad6b7a6bf83
SHA1

cbf5f72dfa5b75f82236310b8d566dd37c914cd2
SHA256

ba14d9918c8d2d18c7f8e7fadb5517188caf94f8f48651c3c5ae5c1dc067ca57
SHA512

747837361e4ebdcae31147074ea026ad866242bafee2fc6601919f0784ac31cfb65ae6c62ed7af2afb8e116794ccae8919e684a1be2a7e76f613e7de53e07564
SSDEEP

1536:SG2w8YpB2KwX76JcuNF2T96DRwwrsqqLu6TdMRBgPJw+O0Nuk4G:9Tp26DNgBEaSkvyCtj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25a3795550748cf9be999ad6b7a6bf83_JaffaCakes118

Files

25a3795550748cf9be999ad6b7a6bf83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\nosferatus\Desktop\SC\SC\dependency\obj\Release\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ