771b76e2b2e7a9f6836e2764091feb12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

771b76e2b2e7a9f6836e2764091feb12_JaffaCakes118
Size

239KB
MD5

771b76e2b2e7a9f6836e2764091feb12
SHA1

1d77293f6920ed5b547efb4408ce3dd7f2ce080e
SHA256

f53122e0bd14f7802c28d21dde5b34a7010c302327c3526bd73e769d9a2835ad
SHA512

6374fc216a4f43bf188411196c041913a0365bbefb05b31f6727cc4958c837a1f31e01e69f1df4fc86e58ff8eb6b5c7a8c46653f94aa3cc5dabf626fabd68b9b
SSDEEP

1536:JJYv8VxpexuKVBeR6Mo6Dh9KutGBksFG:s+zexrBegMo6DHxGhF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
771b76e2b2e7a9f6836e2764091feb12_JaffaCakes118

Files

771b76e2b2e7a9f6836e2764091feb12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\pfix\documents\visual studio 2012\Projects\WindowsSystem\WindowsSystem\obj\Debug\WindowsSystem.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ