778c9a06ebb2db73b9a65ebddbfb0a80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

778c9a06ebb2db73b9a65ebddbfb0a80_JaffaCakes118
Size

672KB
MD5

778c9a06ebb2db73b9a65ebddbfb0a80
SHA1

a590a26628c1cf009e05c848c2b844768ff3c9cf
SHA256

489d8c47bab248248e4c93da23d25e5cff4de4f01ebde5c7811adbe451f3d13d
SHA512

3c57973855a579318cac2e4a19d00922a39c7e87b495ea945d82ddf869c8933ab44858b4f61a5ed12a51c45606b45df89e7b937552d2c5adfaad69a56d4b8305
SSDEEP

12288:D4Th3FcYWqnNMNG16RbeEztUkdcYWqnNMcIcYWqnNM:oJFc1qnNOYovUsc1qnNzIc1qnN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
778c9a06ebb2db73b9a65ebddbfb0a80_JaffaCakes118

Files

778c9a06ebb2db73b9a65ebddbfb0a80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Published Softwares\Windows 7 DreamScene Activator v1.0 (W7DSA)\Source Code v1.0\W7DSA\W7DSA\obj\Release\W7DSA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 568KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ