499ddd3796683428c161a12ea378139b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

499ddd3796683428c161a12ea378139b_JaffaCakes118
Size

1.1MB
MD5

499ddd3796683428c161a12ea378139b
SHA1

71ae349bdae8498d035acd3d6fbab81153da18a1
SHA256

ca47270d064cefa8037e74193a9ea9ed84082f693b760f7d83d1d62e89d07723
SHA512

9139c4b6c0c6e1ae011cb520cfb83c5960e77538edf806f01719c77122569393f6b31d27cfcbf5985a05f61cb8601efa5d43b8fea3576a549a39233f74b62522
SSDEEP

6144:CUznGhegqF4BC5WNrcA2yzUbZz4xu2zONKV1SUznGhegqF4BC5WNrcA2yzUbZz4F:BGqvz4eMxGqvz4eMmfGqvz4eM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
499ddd3796683428c161a12ea378139b_JaffaCakes118

Files

499ddd3796683428c161a12ea378139b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\hm\Documents\Visual Studio 2010\Projects\explorer\explorer\obj\x86\Debug\explorer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ