75f6116d5da04fc393ed974aa78d77ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75f6116d5da04fc393ed974aa78d77ab_JaffaCakes118
Size

182KB
MD5

75f6116d5da04fc393ed974aa78d77ab
SHA1

d56a3c252104caabf0a94a1e46e1892342188e12
SHA256

962fe58fe6dd46dbd03aa0916be17eac9ab84d2fa299bf5ee45737b9c7ca0370
SHA512

79d1001fa5c8832e9c69315570d9dcba970234e7d601ff335a2a8367f8417a2ad625faa35a6cdd2651293bffac7f9f5461b3e214ea0ac27eec00707d7fa1aa18
SSDEEP

3072:SMaO4GGDWGSEE7e4IRuQhG/mYoxBdevTxcTGZgg+aX09tshyb2GHphPQC77qMoLP:OVzduQhCmYiBYvrynak9WhTMoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75f6116d5da04fc393ed974aa78d77ab_JaffaCakes118

Files

75f6116d5da04fc393ed974aa78d77ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\3.1 src\WindowsApplication1\WindowsApplication1\obj\Debug\csrss.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ