673300c470027c79e7b763773d9b9259_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

673300c470027c79e7b763773d9b9259_JaffaCakes118
Size

276KB
MD5

673300c470027c79e7b763773d9b9259
SHA1

0b93c60b1587fb83b76959916ddaf166515c5f4e
SHA256

debda42e2801fa7ea4cae79f2ab0b3c1a957513bff9ed13f0937c458d7066947
SHA512

17ef1638af5cff5a385a5d1b485781672eda559426728274acd0a9e56b42be7ef026583434810bcdc71f1e0ef47143090b7f105dc57a6fc5725d171cfe9e27cd
SSDEEP

3072:1AR/6Nh0rb9mIJYC2r+9rXS9zC/XTyM1DfPyUj3b77Q9OAgTrwsztACJ7xNRBE:k/whsEOY8rC9O/B1DnyOr7korjV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
673300c470027c79e7b763773d9b9259_JaffaCakes118

Files

673300c470027c79e7b763773d9b9259_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ZOCKIR\documents\visual studio 2010\Projects\inject code\inject code\obj\x86\Debug\inject code.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ