69ba3c3e347789b6058ee496ca7bcdd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69ba3c3e347789b6058ee496ca7bcdd3_JaffaCakes118
Size

190KB
MD5

69ba3c3e347789b6058ee496ca7bcdd3
SHA1

c53d2b69a02bf0e53bc0e511c99f41f623d9bcbf
SHA256

12c5b2c53c4b3cc4828c1abfcbd060c5c2a7cf8a06f9431b704acc52014d305d
SHA512

db4d91f42019536e40a1bdf4898a774e6035e201a0434745accdcd512cff1d7b24ec1cdd71738e76a52926e1f7b67bdd3ba8bf1520b7bc4659e1ac329277e04d
SSDEEP

3072:1sOSNsOSqdXmpXPP9w6eR8iomE0cN1AfpqP6ciJOFSF4F4Ts9JXBoKRYjeR:COSKOSq0pXPVwaio3YquHoaoJR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69ba3c3e347789b6058ee496ca7bcdd3_JaffaCakes118

Files

69ba3c3e347789b6058ee496ca7bcdd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ismael\Desktop\vb2008\makoki-projects\install\install\obj\Release\install.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ