8668b84e563794a815585201717d5fd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8668b84e563794a815585201717d5fd7_JaffaCakes118
Size

139KB
MD5

8668b84e563794a815585201717d5fd7
SHA1

2658e57ba7806d87038ca510fc509a53ee52b2e0
SHA256

0b820c5d32aed0eb26bacc5336fa89a86d3f0e78798c0fdee487d180ec9d57b8
SHA512

cdf87411428e470e17ffbd1a11db827f01e80bba0cd30a7a91aca5e3ee4d52f4c54df96ce89b29f2c7eecc27ee1473fab29bc8a216c0ca3d2349a8c6e369eca0
SSDEEP

3072:HyFPG29RasH+Wf/EHpqaGdrwEVIDEtc8aRFxhR:Hyn9Ra2tf8JCdswtcv7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8668b84e563794a815585201717d5fd7_JaffaCakes118

Files

8668b84e563794a815585201717d5fd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Admin\Рабочий стол\free money1\free money1\obj\x86\Debug\free money1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ