4c4746430cdcc32e02ae3811961ae295_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c4746430cdcc32e02ae3811961ae295_JaffaCakes118
Size

19KB
MD5

4c4746430cdcc32e02ae3811961ae295
SHA1

4df95d8d6b1c21efae4a37b79270166f16943709
SHA256

81a3054a762ca21e885da5d94d0cf66bf0e882a80f01ba9d1c42fe3c69668664
SHA512

846688038598cb3d15bed212e6cc2068dfb3c805e9c6e4fa150d7d44d219ffe0b9e180cd1cf8f76399d0a5c2f29b119bb3776112836758af34038de6d18167e2
SSDEEP

192:Cw3yMg+1+04IuHob0watskaJZbK3rZmklp7GnloYk4IAObNIDLR9AF5MSL5YPaun:Cw5AxIr0xr5rr4IDx+LRY5MSCCunebQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c4746430cdcc32e02ae3811961ae295_JaffaCakes118

Files

4c4746430cdcc32e02ae3811961ae295_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2008\Projects\KaMaL\KaMaL\obj\Debug\KaMaL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ