2a79ebe015d5f4e012bd711bc007b0fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a79ebe015d5f4e012bd711bc007b0fd_JaffaCakes118
Size

512KB
MD5

2a79ebe015d5f4e012bd711bc007b0fd
SHA1

6e1fb0d1934104f11fdc622a83ff9c15e5d49981
SHA256

71c19fc4934f7b2cb98946d6a80c8683cf049bd18da73d83d0534865b29192a3
SHA512

4e63df8ddf6cf8ec9ce9e429ea8715be96eb1263958be41b6ac42bef5850d83851254d43b93aebd5b5fb619ef21ee9542d2af8fb91176fac436f7c779a2a5279
SSDEEP

1536:Z5KwVL3yIIBhNGFHUW+brqEAyddElVZFqB6QL4ozanK3zB5GmdVWg+oVL3yIIBh3:Z5KJBBT64Arb9nK3zNdUg+RBBT64Ar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a79ebe015d5f4e012bd711bc007b0fd_JaffaCakes118

Files

2a79ebe015d5f4e012bd711bc007b0fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\bobbyd\My Documents\Visual Studio 2008\Projects\Auto-Sign\Auto-Sign\obj\Release\Auto-Sign.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ