62894cba79bfbf01b78c8b9d93440d9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62894cba79bfbf01b78c8b9d93440d9e_JaffaCakes118
Size

41KB
MD5

62894cba79bfbf01b78c8b9d93440d9e
SHA1

e9ed81846bf82a1844aa137893c250aad953b78a
SHA256

dd05d6cc3474e4be36d46874eacbb608ce2d955894c16de45b8740306c0a41f9
SHA512

4db97b5a7d9e5dcb79a1456f96dfd44cafb10f40169da0a2ea6df6125b20b6f0152d879b4419b42443981d1ee8b685e174f0c96eae44808737340995e65d69da
SSDEEP

768:99VNRAgeZS8Uhw8nY7yRcD9IbeXFn4LWo2XPuZqpn6:bzRAgew8UhjYJxke1n4LP2fgo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62894cba79bfbf01b78c8b9d93440d9e_JaffaCakes118

Files

62894cba79bfbf01b78c8b9d93440d9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Hamza\Documents\Visual Studio 2010\Projects\Application_Required\Application_Required\obj\x86\Debug\Application_Required.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ