66d73a777a75aad87193ee4b2d1cf55d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66d73a777a75aad87193ee4b2d1cf55d_JaffaCakes118
Size

48KB
MD5

66d73a777a75aad87193ee4b2d1cf55d
SHA1

0c15e15b7634fd304c5c3140e80e2a2039c4ef19
SHA256

65bada5f0a04a831c19a6d6d3112b5f9e3c69464cff5f6b34960a871f790f703
SHA512

36f8d9a7bb7c7f74e06ef4d6515cb6d47f03934e36bbe833187290b9f388a20236f656c31fb966e6407639c9bdeeee6f38b15fbc1034542f58c211dc2ccdcbed
SSDEEP

768:dSPOk86bMNifm98QDFcw2zpVaoWB4jP7ePG:dGRdIN0mppcw2zpNWB4j7e+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d73a777a75aad87193ee4b2d1cf55d_JaffaCakes118

Files

66d73a777a75aad87193ee4b2d1cf55d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2005\Projects\mstip\WindowsApplication2\obj\Release\msapp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ