67fb089799b76d8db4eecb203d01bb49_JaffaCakes118 | Triage

Sharing

General

Target

67fb089799b76d8db4eecb203d01bb49_JaffaCakes118
Size

18KB
MD5

67fb089799b76d8db4eecb203d01bb49
SHA1

c15c522a2086f29b4269ef4a0aa69e1d05bf819a
SHA256

d3b6339c80c445b4ad353fa791476e1ea69212d9939afac5aae62185dbe35ff6
SHA512

4a3a3cbb0c62fb0baa8dd74306e93f793bfb6b35d2baf39b486d895830581f540cf7668ef3cfec0813543650c9b973afb48314cd42549bc008beb889d6216167
SSDEEP

384:Rv508LCt/7vj96upeGp9ACLRAg/iDhv1aUGmAe:RgJHhiPaU5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67fb089799b76d8db4eecb203d01bb49_JaffaCakes118

Files

67fb089799b76d8db4eecb203d01bb49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\belgelerim\visual studio 2010\Projects\svchost\svchost\obj\x86\Debug\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ