4047f51a2ccc5be8f4a0563e63e4b354_JaffaCakes118 | Triage

Sharing

General

Target

4047f51a2ccc5be8f4a0563e63e4b354_JaffaCakes118
Size

156KB
MD5

4047f51a2ccc5be8f4a0563e63e4b354
SHA1

6bf063e1cd15ddad03e891153b0e52420f7a7fad
SHA256

0cf6aceab7c8c30d9c12fa1095f7d47dc1899eb89a9a5393d8d8ebe76e106091
SHA512

2921deb32aaf0e853992bc7d33992e00d68c840a4acd6aad021211d4c4c7d8e71efcd3a08da5dc687b632e25520cb2b3f8bafc932990b6826247444e9692f45d
SSDEEP

3072:e7RusWsNpmAjVd1nut+uV2mTVDjFwkWl176jZ1hCagdQvPW:eakVdRQ/vqkg1gEagdQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4047f51a2ccc5be8f4a0563e63e4b354_JaffaCakes118

Files

4047f51a2ccc5be8f4a0563e63e4b354_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tom-Normal\Documents\Visual Studio 2010\Projects\SLA v1.2\obj\Debug\USC_Sysinfo_v1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ