367befee90531b6895f564ff2ac9ad7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

367befee90531b6895f564ff2ac9ad7d_JaffaCakes118
Size

28KB
MD5

367befee90531b6895f564ff2ac9ad7d
SHA1

f40fc666a38b9310f097009eb9bc847bf86d7495
SHA256

cccd6ce243982fdb7882019f3c534524e911dd0cab712ab2c4955468f733d87e
SHA512

bcb9e0db7184294b19f5b1d796bf129be18b445686cc5ee6c4031aaad84a9cc55090a2b699f5d05d7d3486ea4eef77e6bd4f7e9f93e2d3a80db2f7ad5e475130
SSDEEP

192:VNVkrBDjOOXMUgp+ZmLyJL7kOnloYN59tImdWav8Tqc3sfgk7fawQD:VNsB8UOWayJL755fNdWi8Tqc3szfpM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367befee90531b6895f564ff2ac9ad7d_JaffaCakes118

Files

367befee90531b6895f564ff2ac9ad7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Dokumente und Einstellungen\Lines\Eigene Dateien\Visual Studio 2005\Projects\WindowsApplication2\WindowsApplication2\obj\Debug\WindowsApplication2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ