618f10d1bd26c2438fa704918ec894c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

618f10d1bd26c2438fa704918ec894c2_JaffaCakes118
Size

259KB
MD5

618f10d1bd26c2438fa704918ec894c2
SHA1

86ec73fcb512a2bad06c80a19baa7117a0bed4d1
SHA256

8806fe5cd4d8b65019f8c107c65bf5782daf633ba7b9a63595fa5b2d42072006
SHA512

3cc35815f0dcbc0a9636981de6a26a940cc598c96a1a6f672b65e5753e9e333b4239a8a848c7f349edf2cd558da99c11fd89524547b2dd0b852c2191371dee42
SSDEEP

3072:nj5dOSZfaiM4vX30HKGyw1HGPuqimjtE/D9SntP:jff9E0w1mvj+/D9Snt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
618f10d1bd26c2438fa704918ec894c2_JaffaCakes118

Files

618f10d1bd26c2438fa704918ec894c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\DATA\Visual Studio 08\AudioVideoPlayer\AudioVideoPlayer\obj\Release\AudioVideoPlayer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ