5a8f09f2216a8aef9fadbcb09dc6f395_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a8f09f2216a8aef9fadbcb09dc6f395_JaffaCakes118
Size

151KB
MD5

5a8f09f2216a8aef9fadbcb09dc6f395
SHA1

01092fa93bc43a157210d1e51292b812a338d532
SHA256

3ff282498d93a4317139ee611a7a391f5759bc8494e618462ed8f956add8072b
SHA512

a5032c76617c508d0d25e1a040163147c1dc779955b1702ba4407ddb35491a4b79b61679b9075aa54c6f1e3e0e346c591ac386a06ef770e916e6aeeba94a4455
SSDEEP

3072:03ansLTTCF/p1V0ojtm+SgnoA50yTaGwZY2cw6JzMhR8:tsyV0aNSgoA+tRZYhdzMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8f09f2216a8aef9fadbcb09dc6f395_JaffaCakes118

Files

5a8f09f2216a8aef9fadbcb09dc6f395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2010\Projects\Carmen\Carmen\obj\x86\Release\God.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ