4b542fa94daf10d920bd6652539364e3_JaffaCakes118 | Triage

Sharing

General

Target

4b542fa94daf10d920bd6652539364e3_JaffaCakes118
Size

42KB
MD5

4b542fa94daf10d920bd6652539364e3
SHA1

0b8fb96878a28a818a6b836aa08cf39b8f87448c
SHA256

c7909f2c6f70098b10b1c4b91ed2616fa7709bf2d1a3466ee11e368e99de5e9a
SHA512

2e8d466895ee01b16fccc9b0280b447f47f80e7c45deab3f624720ae982d0faf9057ad580632da7e47876e0714b6ab653955d1a3e5266ca6643b78c9e538136a
SSDEEP

768:r7Czyyr7XCK+7oTM4cqs8tQrLIG2XPYQOMorC:r7CznrwoGLh2fYQsu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b542fa94daf10d920bd6652539364e3_JaffaCakes118

Files

4b542fa94daf10d920bd6652539364e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Julian\Documents\Visual Studio 2010\Projects\UltraTrojanv1\UltraTrojanv1\obj\x86\Debug\UltraTrojanv1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ