3e93be00f63d2875cb12faa2472ebc77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e93be00f63d2875cb12faa2472ebc77_JaffaCakes118
Size

721KB
MD5

3e93be00f63d2875cb12faa2472ebc77
SHA1

6a9612efd7b2bf82d283323a9fd18eeeaac1a5e2
SHA256

bf3c2787af162278d8fa675c12a5d6ac3d5e62776a3afda6ccb9d9fe0100ff05
SHA512

d7b7090e3da97e723eafb08c896832a3ffce683613613a35269d0349f1dad93d09cbd45a00c19f58de4df37cd9fd89118bdb9eea4a7c79f11372180940da2a85
SSDEEP

6144:pW9FFQsDd5SZ6Zg77FFQsDd5SVPbnkRFFQsDd5sJFFQsDd5r:pCU4Zg7wCU+KCfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e93be00f63d2875cb12faa2472ebc77_JaffaCakes118

Files

3e93be00f63d2875cb12faa2472ebc77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\USER\Belgelerim\Visual Studio 2008\Projects\dllre\dllre\obj\Debug\Aquates ocx registerer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 561KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ