295cf1acbeb97af0b5ab4a210b9f72de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295cf1acbeb97af0b5ab4a210b9f72de_JaffaCakes118
Size

17.6MB
MD5

295cf1acbeb97af0b5ab4a210b9f72de
SHA1

37ab0dc4ee20780bbff811eb191b6dcf6d9bc6d7
SHA256

526700cd53b3c68eb75a36f337cd7c46c4bccdcea6e6b6058c311b5ad52e0ed4
SHA512

d5d0734550b03b414212c0e368947726fbc23ea8a9b42e1891d0b1073ef65842404c154f1ba2de3f55ff2df5a02eb0921187f68524a665705f0668a837cdb1a2
SSDEEP

384:SRpmIgiqJSpybB2eUUlwjYMi7L6eQHrI71SFw:SmK+PEm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295cf1acbeb97af0b5ab4a210b9f72de_JaffaCakes118

Files

295cf1acbeb97af0b5ab4a210b9f72de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Docs\Kitty\Visual Studio 2005\Projects\Earnings\Install\Install\obj\Debug\Install.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ