61fc2250421b3588dc85774011bcd086_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61fc2250421b3588dc85774011bcd086_JaffaCakes118
Size

167KB
MD5

61fc2250421b3588dc85774011bcd086
SHA1

ec7dfbecb92663d73de6177cc7c9462c68909b18
SHA256

1b60e6820916ac8a1a1cadfbaaf9f44bcc68f6009105a495e56fbba4f5af45ed
SHA512

2f3bc9a9f8627320330c74c50f17c610b080332a948e7984590cb56bd9188fafaa32916a45be84efc03ea099e296cd2375cd96c714508de3d158300863795f5f
SSDEEP

3072:dKXTyxQPHZ2I4nNVI8kQ3zTvuani/M0wAcbuuGv1X8lBPCB:0uxQP52I8NVI+vB9/uu08qB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61fc2250421b3588dc85774011bcd086_JaffaCakes118

Files

61fc2250421b3588dc85774011bcd086_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2010\Projects\Project2\Project2\obj\x86\Release\Project2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ