3388d780f41bef64e876ba8a1245f6db_JaffaCakes118 | Triage

Sharing

General

Target

3388d780f41bef64e876ba8a1245f6db_JaffaCakes118
Size

736KB
MD5

3388d780f41bef64e876ba8a1245f6db
SHA1

c0618546061f8517d1a28510c0d70f4f30496b21
SHA256

bf94c8d39f9c022c266397c253747f2432eab395e9aeab2b30be7160939a8762
SHA512

60f96e79693b342be902e4c6e760f1c09024253473f60e0ce828899e88c5387f9423bb5e8fac5e84ab885f04ac88e2b14500044cb40533c8cabf0815c68c2b3b
SSDEEP

12288:2g/coTNTcU3+QSHzdqfBO4U8xj3gNxLk0yjNdQO3tRhpMqqu6V4KFON:7NAHRH4J36

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3388d780f41bef64e876ba8a1245f6db_JaffaCakes118

Files

3388d780f41bef64e876ba8a1245f6db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Simon Graas\Mina dokument\Visual Studio 2010\Projects\Installer\Installer\obj\x86\Debug\Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 734KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ