89d0c51ae2cb32a544efed0a2ff38ce5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89d0c51ae2cb32a544efed0a2ff38ce5_JaffaCakes118
Size

621KB
MD5

89d0c51ae2cb32a544efed0a2ff38ce5
SHA1

b4e868705b28be1271e5c13a9055d753607c2ee7
SHA256

4d2e46bf2990280e189996a36bfebcbbda3cd18a39c95557e13753508671479e
SHA512

823241f25820269bfd08bcee055edb9430884fdfe332cd93350ae97f614f555c7f6f7d456a83d2929df05fa866a2474f4ba1592d55a9021b170efeb2d83c330d
SSDEEP

3072:Qk4kX5Q8gCVMma/o2TbUDTwkgJi2iAf9ktO:QkPX5QZiS2tO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89d0c51ae2cb32a544efed0a2ff38ce5_JaffaCakes118

Files

89d0c51ae2cb32a544efed0a2ff38ce5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\XPPRESP3\Desktop\khaled clean\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 599KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE