68c7205fcd86d3cfec63e1490acc6275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68c7205fcd86d3cfec63e1490acc6275_JaffaCakes118
Size

211KB
MD5

68c7205fcd86d3cfec63e1490acc6275
SHA1

66e2465baea18f1adc858d5e6470e82c3ccd17c7
SHA256

0194c226f9f132bc3a8ddeda779321119e7beee30061bb042e3f635e6f0bcf05
SHA512

3c6328ef91912ee7a60cb58692847f3a2b39b05b37c4b412eaa76f0d11df4525a6f701f9d45b3fbca0ebfa56600cd9817666b5c3e19a98309ff295d0f3ef949c
SSDEEP

3072:MvdM92C22IcW9CxNEzeXyp6OY7UMuqNDL36TuRC3anItj/DlpCIxLgkt3gbFU527:6JCXUMZNHKaRp2DDrTQbF1gW5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c7205fcd86d3cfec63e1490acc6275_JaffaCakes118

Files

68c7205fcd86d3cfec63e1490acc6275_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Desktop\by_HaCkEr_tunisia.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ