693c75258d2d1acdc6501e2e17cd8240_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

693c75258d2d1acdc6501e2e17cd8240_JaffaCakes118
Size

210KB
MD5

693c75258d2d1acdc6501e2e17cd8240
SHA1

fc45f69cfa019bee140a3296828e6ebda351b79a
SHA256

d2e7b35c039a982e54fabf993c03ce7b6702d96128aedb339937991d41dbabcc
SHA512

ef5f8a9dc31fb305c9b876bd4d6a6ad3685788ed519c7a8cdef2653bb540e9b978de53c3a2ac5c5d21422f0bbd02a068291260aa172e7fa39cf97125445d9996
SSDEEP

1536:H9RiJW8b7yMMMMMDMMMMMQPaWx24RtaXLv+dOIm9RiJW8b7yMMMMMDMMMMMQPaWs:dh8H9iI2mab2oIeh8H9iI2mab22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
693c75258d2d1acdc6501e2e17cd8240_JaffaCakes118

Files

693c75258d2d1acdc6501e2e17cd8240_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Boss\documents\visual studio 2010\Projects\WebDownloader\WebDownloader\obj\x86\Release\WebDownloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ