7e0a79cad98add88070148fb9ddb12aa_JaffaCakes118 | Triage

Sharing

General

Target

7e0a79cad98add88070148fb9ddb12aa_JaffaCakes118
Size

492KB
MD5

7e0a79cad98add88070148fb9ddb12aa
SHA1

75effc9d69686bf3a5937ffe48e2711b8d2828e3
SHA256

961e10de552361ed6da39826e2c634251e0218f3eea9ddba83a99e56338f77a1
SHA512

ac2cd4fd7fd9a67c813f86d7a3bc5d46f5067a8cc310eeb42f940e96688090d4a6e0e2b8f751ce830fd0be9ebc93ee7e53e2f92a1fdea044971a0351352534ad
SSDEEP

12288:UrrkmWeRqPx0tCgJGP66jcrcfAD0UUzViH:eOecPx0tCp66AQ4D0UUzsH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7e0a79cad98add88070148fb9ddb12aa_JaffaCakes118

Files

7e0a79cad98add88070148fb9ddb12aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kdglkrkjdfhslej\Documents\Visual Studio 2008\Projects\PRI\PRI\obj\Release\lyulktyir4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ