4698bb652c1282aca0f3976d402ea650_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4698bb652c1282aca0f3976d402ea650_JaffaCakes118
Size

413KB
MD5

4698bb652c1282aca0f3976d402ea650
SHA1

a4feb5052927cc178c274d926179780ad2b83443
SHA256

e18465df69bab11f922eaf854050a9a5b7b15d68dcb038310dcddcbcb01c4519
SHA512

84d4ed352280e2f0e4ff464bb68ae3ed1f35655e337f51019d50f65fce345b95de256937af82e81be2f77b62b7f9001f71fdf5412a7eacc17ff93042c60e3680
SSDEEP

12288:LXcwBIxjC8sihhriutv0mcCbALhppTuoaIvjT:LXcAIxjI2tiudIXLRvaIrT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4698bb652c1282aca0f3976d402ea650_JaffaCakes118

Files

4698bb652c1282aca0f3976d402ea650_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Brandon\workspace\Genius\Toolbars\v5\Genius_v5\Genius_v5\obj\Release\Genius.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ