48159a39e517694cd35dec553de4ee04_JaffaCakes118 | Triage

Sharing

General

Target

48159a39e517694cd35dec553de4ee04_JaffaCakes118
Size

835KB
MD5

48159a39e517694cd35dec553de4ee04
SHA1

e1391e19b7a828a871c89cf9f0758b5ee82fc5ac
SHA256

5cb8b4b4511802763cb4203ee9af57b798cf44d1b921925c1980921012800c0c
SHA512

5edffecbe8a0fdc5757ca9a3f9bbc28a97b3f2905619ab1e65da45630522ee7d97752908a8c755d53200facf8ea5d01f1773a5b4fb803e8eb01c6af519af1161
SSDEEP

12288:u2sSi0F6i5OFpzx1Bw1regn1cBMBN0B/DXH2qqewGOqzDAMOnYyniZYU:uci0VOFpzx3UBgD3hqe/OqzsnvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
48159a39e517694cd35dec553de4ee04_JaffaCakes118

Files

48159a39e517694cd35dec553de4ee04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\JodPc\Desktop\NC_2017-07-27_306_Thu01\obj\Debug\nano.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 832KB - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ