646917d0de0eeaf8dbe6cd78f3063bb9_JaffaCakes118 | Triage

Sharing

General

Target

646917d0de0eeaf8dbe6cd78f3063bb9_JaffaCakes118
Size

47KB
MD5

646917d0de0eeaf8dbe6cd78f3063bb9
SHA1

2986ccab2e09d56d1b41146e1c31ca4c84ff7490
SHA256

49f226fe47622179f3ecaf19ced8013d1113a3edcc0b8c6610235e2656b14100
SHA512

e180f7ff2271e717872a59cf5784aa07cefdf150a32f3996575dd6679e80bbfdf2578988c931551cb0b03301fa98b9293bdf5e12541f5bdcfaf43c7a7045a617
SSDEEP

768:AUNXJ4+kNdlSof94quXiM/y4zlo6tffurRHNfK+:nZDMZ9aXj/yyRf+lK+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
646917d0de0eeaf8dbe6cd78f3063bb9_JaffaCakes118

Files

646917d0de0eeaf8dbe6cd78f3063bb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dpopit\Documents\Visual Studio 2008\Projects\Nadzornik\Nadzornik\obj\Release\Nadzornik.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ