44b7b45c87270c7a1e44c4bc267ac034_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44b7b45c87270c7a1e44c4bc267ac034_JaffaCakes118
Size

25KB
MD5

44b7b45c87270c7a1e44c4bc267ac034
SHA1

56f18106a16731767d4678c187530660cf479c0c
SHA256

2ea1015cf873bd4f9095c5cfb7d4bfefbe11d8ca94186dd6dadc327eb79596d3
SHA512

248c40555a53987b4d57035a1fca5e6884fe4a2bf5b1780dbac96afb33300dea862b7e986ee3da8e76f98bdba27b776af2b740ecab0e0bef340d72cf859113a4
SSDEEP

384:kho8THKDrdxO+Ijutfu8CdhzGvAL724jcPls/wR1+dNORe1xJ84PUZ:khfI3AhaMBcPu49+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b7b45c87270c7a1e44c4bc267ac034_JaffaCakes118

Files

44b7b45c87270c7a1e44c4bc267ac034_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Visual Studio 2008\Projects\Trjn Downloader\Trjn Downloader\obj\Debug\Trjn Downloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ