3a6ca8c315d35d918199d3eb38a1ca7f_JaffaCakes118 | Triage

Sharing

General

Target

3a6ca8c315d35d918199d3eb38a1ca7f_JaffaCakes118
Size

23KB
MD5

3a6ca8c315d35d918199d3eb38a1ca7f
SHA1

7081283710d2c77c683b1ceee73cd499b4861507
SHA256

14237674a924b971e0dbaefe077bd3da8c3449b2272db3cf1b59cb89c36cc7af
SHA512

1eb780b5e9b6e10c2bdb13accbebec4cea4ff155b94f858ad9d2960b029c83730a71ba112761dbca0cdb3b0d7a6dd80f13da0461e61100e283991341a62c2cd0
SSDEEP

384:tAvWhsqH7uQ42FcsuyZ2LM71aZaLf451G4FcwdzRrVffzPS8hyyuT0YisC:qv8sqH7z4ucsuK2LMJ5IdX2fC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a6ca8c315d35d918199d3eb38a1ca7f_JaffaCakes118

Files

3a6ca8c315d35d918199d3eb38a1ca7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jamie\Documents\Visual Studio 2008\Projects\WindowsApplication15\WindowsApplication15\obj\Release\WindowsApplication15.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ