40069122b7253c7eb11d3275c4a4d448_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40069122b7253c7eb11d3275c4a4d448_JaffaCakes118
Size

210KB
MD5

40069122b7253c7eb11d3275c4a4d448
SHA1

ebb011765d0a3216c34075773021bd5ec9e9931c
SHA256

1e2fd31e7afd312d1241559757a56e20b59a2f89a0324f514a2964bdef2f4a7a
SHA512

11b23afb8debc137528d29a2428946291cd65c0b40d2ddd480170f442191811797d5298b22bf01bb0d99368d48ea8d79ed2f41b1fd5ce92ab25835998de0c17d
SSDEEP

3072:pQ8iy3ZNiNJmvKSf0cDArjgsHqD/ekN44M+izU5EjaNUCvMiD4SWLH3C2fvZoDOD:pimrf0cD0jgrDn4V0FvqLZotjfEKI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40069122b7253c7eb11d3275c4a4d448_JaffaCakes118

Files

40069122b7253c7eb11d3275c4a4d448_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Windows7\Documents\Visual Studio 11\Projects\Old\Banii\Banii\obj\Release\??.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ