462729c2de1fd0da3d610976df452919_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

462729c2de1fd0da3d610976df452919_JaffaCakes118
Size

949KB
MD5

462729c2de1fd0da3d610976df452919
SHA1

e824b113250eac4fa46c00875d565ff80234cc2f
SHA256

52861d4acf8806115b0c59d649eae8a9ad774343f6a525513a790cbfc1d2104e
SHA512

9c0ae642c45c106e52548fc45c8966cf7fda1a9da62a194b2bb9bb87151f75878ddd157ec6eee01c24573a798e47a9d0bf193de99d2fbce8bfbf8f222af77eb9
SSDEEP

24576:4lX4AjNhFmnmOxsrn9YIpA/tTUmZiRTruqIQXYU2GFaczfpKD0QZh9u:4VNhgCrn9xAtTUmZiR+2YU2GUczRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
462729c2de1fd0da3d610976df452919_JaffaCakes118

Files

462729c2de1fd0da3d610976df452919_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\2.2.5\WindowsApplication1\WindowsApplication1\obj\Debug\cssms.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 912KB - Virtual size: 911KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ