3a856873ad8a46077ec3b833847ff0e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a856873ad8a46077ec3b833847ff0e0_JaffaCakes118
Size

43KB
MD5

3a856873ad8a46077ec3b833847ff0e0
SHA1

363e0a7db9323d10dd27b0dadf2ea5601d71d4a0
SHA256

1cafe6871351c5e37fdb6000da0d213717e25eb1f984ff4fcbdd3e6fb1bc9210
SHA512

e9096f5a19d52dc7cea9e723561d6afef6b61e59c52edc0491f022dee5a781b3c9a64388d0482f42477f1c86a358fcd51cb7c257205e2875296f314f5362d8b2
SSDEEP

768:68r4nvJWgsvG573kn/0MtzlUnWfpyy1aUpzhsvQd9YdR/9KF6d8r4ciYcvc:68gvHsvG572/btzlUnWB1zWYd9YdR/99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a856873ad8a46077ec3b833847ff0e0_JaffaCakes118

Files

3a856873ad8a46077ec3b833847ff0e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Brian\Documents\Visual Studio 2010\Projects\HP\Launcher\Launcher\obj\x86\Release\Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ