2bd77a5eb05ecd9597b3fc99d749f2d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bd77a5eb05ecd9597b3fc99d749f2d6_JaffaCakes118
Size

709KB
MD5

2bd77a5eb05ecd9597b3fc99d749f2d6
SHA1

69ab1055a6ce5683c52463fdc130f9b8cea29428
SHA256

b04803f891bca85eeed908aa0dd58ac74075bac61e40e39329eb4e819ca7097a
SHA512

8249132ce2e6cff9f7b7fdd41e45a3f3ec739a4dbf0c1c2eff086bfcb580f3ae1269fbdd5d24d8328e1f57a296ec6a31460b24d2ec06dcdd8bb87ae72a84d3fc
SSDEEP

12288:p9iJ8nY9L2VXf1jiu2/cuDWfBru18Zih7h2Txy7WK3zBek4sbtaESKde7gXst0:p9ianISVXhiynu18AlQT0WiRYESKK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bd77a5eb05ecd9597b3fc99d749f2d6_JaffaCakes118

Files

2bd77a5eb05ecd9597b3fc99d749f2d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\2.2.5\WindowsApplication1\WindowsApplication1\obj\Debug\cssms.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ