327b343a8dd5f83806c62d8e086a8648_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

327b343a8dd5f83806c62d8e086a8648_JaffaCakes118
Size

238KB
MD5

327b343a8dd5f83806c62d8e086a8648
SHA1

b8ad4dced1be77fa204bb814bcfca421a411ca77
SHA256

f7645556d581e1d139f42397d361d3a97bc29ecadeda67d25be0d80b07149fff
SHA512

831192557080f8ff0c67d1fe455dc47b55a148c167b9016ca4467d50b42a0b745565e4d231d85a986d9aa52f2005b5be59c4689d3ac6ec61de4e458f9b6812ab
SSDEEP

6144:yZ8NH6DG/IxWDLXd43LI2rn68XXFn0V5a:yCNaDILXdaIa6e0Da

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
327b343a8dd5f83806c62d8e086a8648_JaffaCakes118

Files

327b343a8dd5f83806c62d8e086a8648_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Mercenary\Documents\Visual Studio 2008\Projects\FoX\FoX\obj\Release\FoX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ