823d7fc992e2b4b2e44cb30cfcf2ad58_JaffaCakes118 | Triage

Sharing

General

Target

823d7fc992e2b4b2e44cb30cfcf2ad58_JaffaCakes118
Size

723KB
MD5

823d7fc992e2b4b2e44cb30cfcf2ad58
SHA1

eed36d85c374ceafc134a340f3f6dc2eafd35bef
SHA256

52706732fd76e71e25523dc927d7cd97c98a1e594de484ad68df9d9aeac200bf
SHA512

86fa7e82ac45d3d337b9c636750836c3bd696e8044bc4785ab32f2005d914b55839b1c2fc8ac9241f7fc2f7ccb603935e975e78224f341c27947b83e1cb0a4be
SSDEEP

12288:qcLzzgBT4KT0gnbfmfBYoxy831CzKZZZPsrd+XTR+xsk:vz04I0gjmfBYJ831XVsel+xsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
823d7fc992e2b4b2e44cb30cfcf2ad58_JaffaCakes118

Files

823d7fc992e2b4b2e44cb30cfcf2ad58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2008\Projects\Project1\AvG\AvG\obj\Release\AvG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 680KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ