61578b80c5aac9ddd1211461c85d096e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61578b80c5aac9ddd1211461c85d096e_JaffaCakes118
Size

396KB
MD5

61578b80c5aac9ddd1211461c85d096e
SHA1

e4f8527faacdf5780338ce689901836deacae031
SHA256

9006c1107e07d2ebe2b59b51788acb671fae05bacf09e477c50b7c7f44debc44
SHA512

58daa29013b6a7eb4f88adf821e4ee04dc13ed7c6929b354e9f81b3bdd636f6c0dc1964f07f8c7bc6ebf8a485adb5ffbddca6bd08265dd67bde0d8e266e3cbdd
SSDEEP

6144:YagzIyinLORpO/GVXqcRC0ek/myhRgaMwsFJisSxSTAIp:YagzIFf/0XqgC0eDagaLxwdp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61578b80c5aac9ddd1211461c85d096e_JaffaCakes118

Files

61578b80c5aac9ddd1211461c85d096e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Owner\Desktop\Trennie\obj\Debug\Microsoft.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ