74e422a6bf0e1cf71ae14c46f5756e55_JaffaCakes118 | Triage

Sharing

General

Target

74e422a6bf0e1cf71ae14c46f5756e55_JaffaCakes118
Size

729KB
MD5

74e422a6bf0e1cf71ae14c46f5756e55
SHA1

901bc0ae05063b4313c39619158b98628eb90a7f
SHA256

9a46957f60e81f9ebf8bd0dc853ada33ad849cd8a7e19208efed41f6bbaa5fdc
SHA512

1c14975fb6aec5d94344ce30542a3d67e8c969ecffde1d82511e87675f2457ef7dd4d71fe4001d02a7dfff7c7b3d370fb6536ef5c377eb862e1698d95ebd75e0
SSDEEP

12288:C3R3vxPBuav4mPZhyK6KGZ4B7sgcy0PEH3MJ/vy3yi1X6DP7BHH:CB3BBxJl62b10Pi3MZDi8DTBHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74e422a6bf0e1cf71ae14c46f5756e55_JaffaCakes118

Files

74e422a6bf0e1cf71ae14c46f5756e55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\3.1 src\WindowsApplication1\WindowsApplication1\obj\Debug\csrss.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ