8cfa453a275c8a05c20a6b613a659d19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cfa453a275c8a05c20a6b613a659d19_JaffaCakes118
Size

97KB
MD5

8cfa453a275c8a05c20a6b613a659d19
SHA1

d88819b45b11f4cf475dea95ea01135c5ed05c77
SHA256

c7c6143cf1a7b664aa197ab2af7e2f551d0e8557de24befd6e55e0742671b2d6
SHA512

4f17ce96b4b5eb6a7f55aaf2d1540be376d5df5b0a06f911e12740958313b9d5a4d7bc403513a035aa452be6140282ab593627a82e5d717b6c170d05a71419f4
SSDEEP

1536:M3ZKTS4P1z8ykqgR/QM1cl9+GvoQ+YTKt5RDtcjEOg1yvuSeUiovw9:68rkNR/QM1cl/GJR+cyvuSeUiovw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cfa453a275c8a05c20a6b613a659d19_JaffaCakes118

Files

8cfa453a275c8a05c20a6b613a659d19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\DZ--ZD\Documents\Visual Studio 2008\Projects\steb\steb\obj\Debug\steb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ