30c367668d766ec35f9cdd1f6908b7b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c367668d766ec35f9cdd1f6908b7b3_JaffaCakes118
Size

50KB
MD5

30c367668d766ec35f9cdd1f6908b7b3
SHA1

203fb736650540dfe9759f1f5fedbddf0d0c2e2c
SHA256

0ec5a7d5ccd06d195dd52f5a7b0911afd7e3e682ec3208bb2125ff462d792a58
SHA512

579e73fad078c7e5e9b2053f8001eb955e89c67a8485d598b37b07267ad814af2cc1c52707ab5a3001adb83a7715239222e9356dbd86694b93544c5ff8a944e3
SSDEEP

1536:rJEjVC2wKUM/Tdd40vC8UatxTAATLbnFQPJ:V8VC2nUM/Bd42UOUOmx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c367668d766ec35f9cdd1f6908b7b3_JaffaCakes118

Files

30c367668d766ec35f9cdd1f6908b7b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jack\documents\visual studio 2010\Projects\Genesis Beta\Genesis Beta\obj\x86\Release\Genesis Beta.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ