47722e163fbe8f19472b06b4f1d7f481_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47722e163fbe8f19472b06b4f1d7f481_JaffaCakes118
Size

500KB
MD5

47722e163fbe8f19472b06b4f1d7f481
SHA1

b2ac8f2a81b5faf411d169066075fb487c36cc20
SHA256

14f57882ed5e93b0965638b942f08bd1ba3255cb25b5d6d1b5430d22ac9240c2
SHA512

613eac8405e2b19d9868df505bbc3041f7a718edf073a2c901aaada4be54c4de971ea96ea70a815388efbba032bd955382a49a10fd53344b3892be6f875f928e
SSDEEP

6144:lKRlfdLQsZ8KRlfd3xo1JhN2CFM71KRlfd3xo1JhN2CFM7J:M1LpxYJhUCE8pxYJhUCEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47722e163fbe8f19472b06b4f1d7f481_JaffaCakes118

Files

47722e163fbe8f19472b06b4f1d7f481_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Documents\Visual Studio 2008\Projects - 2\Server Undetecter\Server Undetecter\obj\Release\Server Undetecter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ