7393bf50b706271382a4147deb4388ed_JaffaCakes118 | Triage

Sharing

General

Target

7393bf50b706271382a4147deb4388ed_JaffaCakes118
Size

317KB
MD5

7393bf50b706271382a4147deb4388ed
SHA1

439ffaf9e8950fd11281750237ed5f6e2aa1d941
SHA256

b0ecd46abb40d7dc7c6a4fceb39adfd4d63285d1a9f449dd2e26fbbc2c0619e1
SHA512

7362315af56a75d9c07249ee2a57c57b4091fe6a174bca26862ca7f1e86cdd6e26fb576b7e0c55fea4092e1712f7fc840fde3988de4fff6398d54121d6ef1cf7
SSDEEP

3072:MXabXaddgYYUYYPvwviPrc8xdNcmXadgYYgvf:M8wdzvwvQw9vf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7393bf50b706271382a4147deb4388ed_JaffaCakes118

Files

7393bf50b706271382a4147deb4388ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Thijmen\Documents\Visual Studio 2008\Projects\TCP Chat\Secure File Stub\Secure File Stub\obj\Release\Encrypted File.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ