2c0ceb21e288ed9fd0c1907c695228c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c0ceb21e288ed9fd0c1907c695228c6_JaffaCakes118
Size

189KB
MD5

2c0ceb21e288ed9fd0c1907c695228c6
SHA1

13b86e9ac6f4320cd2a3e103547773cf39f9edf4
SHA256

abb0e53196b421556e4872f8dab25eb9dfe1758321be1005331ecf106f49f278
SHA512

f7878b0f26861fedacb498fda8d203a6486fb88fc1861d214224f481ee8b103a93d65aabc9a9b2531402a7778b684cfd7d7896d5dfae80007d52e7b08016adf4
SSDEEP

3072:i9x2DVHaXb02+SrcVb3jNCCXX6N1tbM4ABXM8Q29CAmY25qqBjTN6vQ3p/uUt3nm:oY72ox63ABZ2N76Mv5niU/kl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c0ceb21e288ed9fd0c1907c695228c6_JaffaCakes118

Files

2c0ceb21e288ed9fd0c1907c695228c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kdglkrkjdfhslej\Documents\Visual Studio 2008\Projects\PRI\PRI\obj\Release\gr543s.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ