8aea81f308ef078aa648d8bb95682b08_JaffaCakes118 | Triage

Sharing

General

Target

8aea81f308ef078aa648d8bb95682b08_JaffaCakes118
Size

33KB
MD5

8aea81f308ef078aa648d8bb95682b08
SHA1

a8c28ede0123569d11315a7baf056917d2a40519
SHA256

35849df055b6721bbaa4ba9f7761f218f70d1d1b72a5f55cdabbc04506d9ee40
SHA512

743119add64207e04f71415defd4ef3197c1c2c26b432c8eddec3cc15ce61af1434640ee57e441573b0826b7ba6d6657fda6a0235e01c14c8bf22fb8c931718c
SSDEEP

768:2JcxDEGCgUl9lInW5btuge47dSUq6SR9NV+p3/TgoDCWSuiNHL5:2Ox4GGu7ZUGv+p3LgMCWNir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aea81f308ef078aa648d8bb95682b08_JaffaCakes118

Files

8aea81f308ef078aa648d8bb95682b08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Sorn\My Documents\Visual Studio 2008\Projects\Copy of CPAX2\CPAX2\obj\Release\CPAX2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ