29134b696d57e8290481d70ad159023e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29134b696d57e8290481d70ad159023e_JaffaCakes118
Size

24KB
MD5

29134b696d57e8290481d70ad159023e
SHA1

d2396b4d61b97b780d1f59cf8bbf7aa89dfd784c
SHA256

9431a0e7814884fc6653f9e7a8a0a3d4fdb684e7aa0f3e0fc3921fab8b31ce7f
SHA512

a6f63d9585f2a39aa4d9f0365467b1f09e7b8e7fe593930bf254da0c652fd5f8bdc81311628c0dc6fe9d7e705b993644b40c2a07a83f21cf41e743bae94875f4
SSDEEP

384:TwkvEfj/ACrW7C+IqAhztobNR5h4qWQnbR+i+pZI8+LRo4UoyTtX2PYra9:kIEhWOLSRlbPq3jDm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29134b696d57e8290481d70ad159023e_JaffaCakes118

Files

29134b696d57e8290481d70ad159023e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\moawia\Documents\Visual Studio 2010\Projects\WindowsApplication6\WindowsApplication6\obj\x86\Debug\WindowsApplication6.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ