48a8fd5e56aad2a2bc26012819e6d5a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48a8fd5e56aad2a2bc26012819e6d5a7_JaffaCakes118
Size

28KB
MD5

48a8fd5e56aad2a2bc26012819e6d5a7
SHA1

2a5803e9ac0a4997b74a3fc7d321e5f1a3978a9d
SHA256

705406fbac8eed4e539735db082d4fb622e99b8706af5c15863d1055f3325f7f
SHA512

acbe98589b15c800a2ee81dcaec5643cdf9e610024785cef72ef15e2ceb6b1ee5438ba6dc207328aa3586c02fce0a6fed68d9394c8de814864f970702d646379
SSDEEP

192:q47Ma55giOfiwPiUZcDyIoZVanlYJLLtIDLR5xqVk1YM2s3Pxq:q4gGEXzZqyI4V1+LR5xqVmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48a8fd5e56aad2a2bc26012819e6d5a7_JaffaCakes118

Files

48a8fd5e56aad2a2bc26012819e6d5a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Visual Studio 2005\Projects\nemo\nemo\obj\Debug\nemo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ