78993755f19aca089b29d2db43237099_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78993755f19aca089b29d2db43237099_JaffaCakes118
Size

72KB
MD5

78993755f19aca089b29d2db43237099
SHA1

c016345fdb61bbe4125d1b6d98f634a58ad2d2fd
SHA256

92f572b2a45ac31c3e9614b0ee5cf4c85988d69708b8116e9975bf37c177a322
SHA512

028616c5b833f3f2b9995d375ae6cbb7cd1963f9796bbf5d445e1aebd32994ed57c1e3b1c9121c6a00752acde5e928b29b1d0892b4dbbd56f6b79fc5614871d2
SSDEEP

1536:3GR+LIWzyA+hLLuxg2495sZ4hCfd0Mi38EKOX6KOjXC:3TDoLGJ49zho0M61KzKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78993755f19aca089b29d2db43237099_JaffaCakes118

Files

78993755f19aca089b29d2db43237099_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Daniel\Documents\Visual Studio 2010\Projects\SlickRat\Gold\obj\x86\Release\Gold.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ