7481770c3d720225bcbafaa41390d439_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7481770c3d720225bcbafaa41390d439_JaffaCakes118
Size

112KB
MD5

7481770c3d720225bcbafaa41390d439
SHA1

0d22b0d43ffa1d6724e57891ed78cf29db3353ba
SHA256

6efab510dff9a43d737c3ff1df0655f5b06e2291128ed6711d3a73bf71e0efd5
SHA512

6244ddd7d606a93210429f1dcaf894432f1721afea2dead90a45d16beeb8c48358f6a368886424495c3a4eb19573eefd9deac9357067558333f77aaa506b1f73
SSDEEP

3072:CkW/ym4pqQf0P81WVdV1C/Cx+EPn3d8xS/J9:Nn3sdVs7EPt8xW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7481770c3d720225bcbafaa41390d439_JaffaCakes118

Files

7481770c3d720225bcbafaa41390d439_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\RE\RE\obj\x86\Release\RE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ