35c9de1814e4865e83a606597abbba7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35c9de1814e4865e83a606597abbba7d_JaffaCakes118
Size

97KB
MD5

35c9de1814e4865e83a606597abbba7d
SHA1

1fa276b9cfd7087735d58f597251f8aca0afc2f5
SHA256

55eb55267909e3327ce9742c2b953ae167b69c663ee1c29c5a37f48145160197
SHA512

09ec1ae00819a5ae2bc7e019ba893c36c703a66a47558424470be6550a835089fc585c52d41603c6937309fa25a6949569970d0cac34bb3c6394bbf5461a04ce
SSDEEP

3072:/BHXv9yREuRmWs4EDkvNVSeCU3eL3uqW1iSU:dXv9yRr6klVhUz+iSU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LOIC.exe

Files

35c9de1814e4865e83a606597abbba7d_JaffaCakes118
.zip
LOIC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Visual Studio 2008\Projects\LOIC\trunk\obj\Release\LOIC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ