3d8fcfc43e0d59a58feac02efc672068_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d8fcfc43e0d59a58feac02efc672068_JaffaCakes118
Size

3.1MB
MD5

3d8fcfc43e0d59a58feac02efc672068
SHA1

aa685e7c1909be946b099bcbf2455b9bad9f06f8
SHA256

e0e1e213c45c676f4321055124d0df630076f84fd99abee92ff32d87ae2d1e14
SHA512

80d243d4d77974fc7dd22e3658e142f565fc2a4105841c0db6b067ac8510e4b71a0ffe34a644917e7344c9418781d35739c86e349660b26fa47a68d9b941ad64
SSDEEP

12288:MY08D308Dr08Dr08DF08Db08DV08Dx08Dns08DL1:jDBD1D1DXDlDnDDDn4DR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d8fcfc43e0d59a58feac02efc672068_JaffaCakes118

Files

3d8fcfc43e0d59a58feac02efc672068_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\93826927\Documents\Visual Studio 2008\Projects\CrappyEB\CrappyEB\CrappyEB\CrappyEB\obj\Debug\CrappyEB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ