692533ba5bcfa4ef9fd2bbccecd57933_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

692533ba5bcfa4ef9fd2bbccecd57933_JaffaCakes118
Size

917KB
MD5

692533ba5bcfa4ef9fd2bbccecd57933
SHA1

76f64dcfcf8bfbc351cb5945702e06ebb3bd1460
SHA256

49a0ae9a02638392f38b1e9c4a24ce8dae758f0555131eefbffc9b037567df12
SHA512

109256afdeee0aac865e35b9bb5970b341c8c15d0a7acfdce7af8213bc10821540b38207b1b6dfd822fd4390fd7966f4203545adb29fdc3a49372df645579baa
SSDEEP

12288:JTmtUOoOORd269GHX/GHXjdCTA8OXQOESVPFOnXVrohSHXIxxDSMYp:JKa26oHOHTcwYCMXInS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692533ba5bcfa4ef9fd2bbccecd57933_JaffaCakes118

Files

692533ba5bcfa4ef9fd2bbccecd57933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ajmals\Documents\Visual Studio 2010\Projects\Binder\72389 Binder\72389 Binder\72389 Binder\obj\Debug\72389 Binder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 581KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 334KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ