33e62f37e042d140948c8614ab71b5ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33e62f37e042d140948c8614ab71b5ab_JaffaCakes118
Size

333KB
MD5

33e62f37e042d140948c8614ab71b5ab
SHA1

aabc570c77803248abb0fe465d73c1ac72c91d48
SHA256

c4d7d39825dcc97f3133f3b061444f90811e1b28108f67618ddcddc18a775a04
SHA512

2676621ecc959ebdd5eb70ce94de281b86a8e74cb1d6d0479a30e2fe759edd7240b2dd89c6d8f491ed86ab0d49f1820810ee2cba8acbeb7224400597a5890ae0
SSDEEP

6144:D21rrXvzOagxPHQ2eYob5uBpJf+2fq5ovf/UqClDc3:YPXvCa+je0rJ/quTEQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e62f37e042d140948c8614ab71b5ab_JaffaCakes118

Files

33e62f37e042d140948c8614ab71b5ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\2.2.2\borlo\Themes\obj\Debug\Theme.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ