83ebd681b8f70a16f8415d10cf957d85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83ebd681b8f70a16f8415d10cf957d85_JaffaCakes118
Size

36KB
MD5

83ebd681b8f70a16f8415d10cf957d85
SHA1

51f62f8f5ce41cc23d1e3a960519e76359f79c34
SHA256

4ef609d0d19b133ce5ba2c33fadd36df9c13c4a61a56150f9ce392a1b074ad09
SHA512

0696e280b5edb76d38ac181496e54e36e90b163eebabdc5c558a23791a4b12fd3610d74fe2b3cb6eb6f6e9a8155cbe2b17a2625dd004185afe0e254b9c265098
SSDEEP

384:kWWn6PLISaxtR5ErSX/+V5MsKp5jK675S0dpizjRBe1zt/xNZ174Db4AgBiMPck3:tPISaVT+3MsiOvU6ixf9ObkBiJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83ebd681b8f70a16f8415d10cf957d85_JaffaCakes118

Files

83ebd681b8f70a16f8415d10cf957d85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\Socket\trunk\SourceCode\FrontEnd\ForexPlatformClient\obj\Debug\ForexPlatformClient.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ