71d516b41bbbbe675db5bdf840cfdbee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71d516b41bbbbe675db5bdf840cfdbee_JaffaCakes118
Size

256KB
MD5

71d516b41bbbbe675db5bdf840cfdbee
SHA1

911acb26c91cccd83980ba1985f2ed70e6ed2ed5
SHA256

2edd6dce3c76a5b3eb7c0f4559eae10a26ebe3d9a3247190ed8bd737418fbafd
SHA512

e4390a3cf357230199f0ea9a8292d680c63f7cf60f19301659a097eecd84338a5b98b1a6b03f2ba875ad2631a7837ab5797f8ab32869ed27bf77008b8ab1c4ea
SSDEEP

3072:Hrppppp+ppGX21kWtoAg4gGzppppp+pp:HxGS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d516b41bbbbe675db5bdf840cfdbee_JaffaCakes118

Files

71d516b41bbbbe675db5bdf840cfdbee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\GamingStation\documents\visual studio 2010\Projects\Email Bomber\Email Bomber\obj\x86\Release\Email Bomber.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ