316a54d125900030d72332e717d222ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

316a54d125900030d72332e717d222ab_JaffaCakes118
Size

802KB
MD5

316a54d125900030d72332e717d222ab
SHA1

7e61fa1bfcfbaf139fdc91e3b01f0bbfeff6712f
SHA256

bd587dc1422a6c4dbec7c30bff4b9eda5f7856aa5a46dc810ec17c968831a011
SHA512

25fd781148c090a11a0a6e4aa0e5da93fca872adf7f27d7aad155b4fb4fc2b61472372def7a0c1e0bca2c10f8bdd963037e998786b116a9f06b3e9f8a4afeb69
SSDEEP

12288:WD1vmjxz/72P7oD4oymraxZMNKncfh/neMiaz8YvYwDLPBBIucapq:Dj88RtLNKncfh/nR5hYQLMqpq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
316a54d125900030d72332e717d222ab_JaffaCakes118

Files

316a54d125900030d72332e717d222ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\nathu\Local Settings\Application Data\Temporary Projects\asd98xc7v98cx7v9s8udfdshfklcxjviodsfu\obj\Release\asd98xc7v98cx7v9s8udfdshfklcxjviodsfu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 227B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ