2e17c2f997f1b0752fbf931e1d47d89b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e17c2f997f1b0752fbf931e1d47d89b_JaffaCakes118
Size

781KB
MD5

2e17c2f997f1b0752fbf931e1d47d89b
SHA1

d3224ab1480899df16f15e77062581260d4710dc
SHA256

16e3970880da3a2c003683b8742c00c296142bf069505513076676f294aeea93
SHA512

8df5eae24cc739126ba26ce04a98c970f23aba0a1c3dc776bfa4863119af5553015b1372f95209a5d3ffecf427afe29ad8c5690dab423e11a99bcbd3ccbffbee
SSDEEP

12288:36Muom8/nK4Iu+nuzK0bpJqQtB6VOI3Zds1LLLF37Wq5/g8YaacuSFgeliaZKn2p:Kv5cIxuzqQUEpc30aoFBKkaa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e17c2f997f1b0752fbf931e1d47d89b_JaffaCakes118

Files

2e17c2f997f1b0752fbf931e1d47d89b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tor\Documents\Visual Studio 2008\Projects\Balle\obj\x86\Debug\Balle2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ