733ca67c42c4003839494569e20cac94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

733ca67c42c4003839494569e20cac94_JaffaCakes118
Size

1.7MB
MD5

733ca67c42c4003839494569e20cac94
SHA1

cdcdb26dae7481d0b75c8a75bf466aa57f4cfccc
SHA256

3e8eb5cd133cfc01e1bfbed99867357925b2171b6e10b8a00cb39ab71011a33a
SHA512

bc53dd6afa9863419266329c3fbaa074e1c605fbab090e8bd78c5c177af8747d47296214d3a71e4693331363a5ff5dd9102a6315efb9f729b1b2b2397511bae9
SSDEEP

24576:laYF/sUtx+iiDwWfN1gfkIg9tJIIIPncqCngEHTzcb1u+CcF:lTptx+i4bUkIgtKII/knlzzQ1u+7F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
733ca67c42c4003839494569e20cac94_JaffaCakes118

Files

733ca67c42c4003839494569e20cac94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tor\Documents\Visual Studio 2008\Projects\Balle\obj\x86\Debug\Balle2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ