3eade11d99eeb8b63db056f1361279ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eade11d99eeb8b63db056f1361279ea_JaffaCakes118
Size

149KB
MD5

3eade11d99eeb8b63db056f1361279ea
SHA1

47e921238634c881bd40d0a02e2f4d81796803e3
SHA256

19645e41148e77c47c588600fa16840f7d246cf4a9910278f68073c27afc7dc4
SHA512

f1aac2f44e101c9bb3d57bf35a301c47ac469816f364975f8876a3e4f21e44caa4aecf14c8d382fcf6a8c50c93d0469cd4367a57533104c731bc9c9eb12e2711
SSDEEP

3072:0SBd5BaGgMbBjIW3fc3/lyO73rAKfjAxGBA6mNwKY6UO:rBdWijd3fc3gw3r1sx6EG6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eade11d99eeb8b63db056f1361279ea_JaffaCakes118

Files

3eade11d99eeb8b63db056f1361279ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\JUSTIN\Desktop\Multi-Project\Multi-Project\obj\Debug\Multi-Program.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ