30a6f63dfef701e1d7b18da4603ae556_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30a6f63dfef701e1d7b18da4603ae556_JaffaCakes118
Size

700KB
MD5

30a6f63dfef701e1d7b18da4603ae556
SHA1

ee02685442f883f2c7776dbc737b56a0705ff90f
SHA256

144b6bc2a8b7556ee8385aef5773f7cae388cb9ea125d7ae6fd4769ec6ca1f1b
SHA512

f441926101430d3128753324c46d4a4dc86f18da1fdb30f93b8361cde24206370125505ef5bf9a0845b1ebaa0f26d847b68d38bc9880eb3871ee9b0336d6324b
SSDEEP

12288:n/C9tKSVLqZJVTXwHY4+Zj7qrGN+sVvfQE1ZTvCcn4tB+LMgq4z5s4Hn:/C9tKCqZ7TXwSZj7qrZ851rnMB5B2sEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a6f63dfef701e1d7b18da4603ae556_JaffaCakes118

Files

30a6f63dfef701e1d7b18da4603ae556_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\1.8.8 src\bb1\bb1\obj\Release\System.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 663KB - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ