48fdfe1d3c2c4822e6fabdc142939090_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48fdfe1d3c2c4822e6fabdc142939090_JaffaCakes118
Size

135KB
MD5

48fdfe1d3c2c4822e6fabdc142939090
SHA1

8789d24d80fdee8ecb50f1926dbb929000b1044f
SHA256

17f4832ac9d923361e9f26c7b89e5ec3d5b9f0a2e141bb55f78c5c9debe7cb55
SHA512

ad4fb142a73e6ef6d8adc25b228ddb11dde96c0a1ede5a6b80d3f6d60ab58f26b5d86cb113f986343c435dd534e9373f49b8b81116932740d860dbc694014a43
SSDEEP

3072:GiTe5uk8WwTQIEBRwaZFcSv9VAk+NkuuQU0FPn6IrOU7FB2aPu:G1uk8Vs7BRTcSv9enGjqPn6kZFB1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48fdfe1d3c2c4822e6fabdc142939090_JaffaCakes118

Files

48fdfe1d3c2c4822e6fabdc142939090_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sanu\Documents\Visual Studio 2008\Projects\Aplicacion\Aplicacion\obj\Debug\Aplicacion.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ