47f13cf60a4f1d02784afc85702bedba_JaffaCakes118 | Triage

Sharing

General

Target

47f13cf60a4f1d02784afc85702bedba_JaffaCakes118
Size

493KB
MD5

47f13cf60a4f1d02784afc85702bedba
SHA1

9a462b0f2e888645e4bde83391da0eb333db34e0
SHA256

a1eef8a5a7b1640d2f161a67563766b6dd899f1ada93426c1fc1e2e599323f18
SHA512

d26cccbc1fa16fb54b323f8e560f31cf707d1bc4104fa9f3485e2b854a5ced5d9045a706aef082f2ca2227960306940f4aaf623d628129e72f7c5cbf7d0cb914
SSDEEP

6144:/sShZWyrW/gR4nsnDYdCzxyn1Nmrf2mzq46uyIuKmL03yNH6AYdzlRx1edQRX6YL:/anskwzYn1YTHpIzKmgih65udQhQ0kc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47f13cf60a4f1d02784afc85702bedba_JaffaCakes118

Files

47f13cf60a4f1d02784afc85702bedba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tor\Documents\Visual Studio 2008\Projects\Balle\obj\x86\Debug\Balle2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ