48b04ba47bf78f14b38ab345538a2857_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b04ba47bf78f14b38ab345538a2857_JaffaCakes118
Size

504KB
MD5

48b04ba47bf78f14b38ab345538a2857
SHA1

9752385e7a464a946dbcb1a1a32d5fb0bf6b5dcf
SHA256

e01681e25a3a216bdc41f8f25a3a61a3718091898a2974cd9bf334c1250b8330
SHA512

4c2ae62ca2c3408bf64fdd848168366ebdce90d54766d766cebefc1d9f88edb86193af5e24926a9db776987c38bd66b2d6f4b6cf12dad561dc6373a668a49712
SSDEEP

6144:0jvfljuoQgs8kg9Xa0Tq4fx6rX2IXSxu2rNGRL1QU0Rm0dAy3ZpqEUMJ:qhZDzjp6rG6srN4LOU0Rm0dj6EUMJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b04ba47bf78f14b38ab345538a2857_JaffaCakes118

Files

48b04ba47bf78f14b38ab345538a2857_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\r \0 b \Documents\Visual Studio 2010\Projects\i f h \s t\yu \d \q \j .jpg

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ