8d594d7fb7aca2efb76cb6821aef2207_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d594d7fb7aca2efb76cb6821aef2207_JaffaCakes118
Size

238KB
MD5

8d594d7fb7aca2efb76cb6821aef2207
SHA1

7aa7287158b2a35255838f9ff076731a4742df04
SHA256

4650cb580dd68e36cf4c8d17c8dd9907f288c7d169472301a4abe5066a4ebaed
SHA512

f8a66600b819f065e721b2178d5db37d1bebcc49793244803a8d3e91a2e3c6a32cf5cd6bdc00ac6ab73d96c16918358e2fd114265a6466addd83ea1f900ef76d
SSDEEP

3072:WZcUtEBVIz0jSFFiDEI2q22OoqO1iFdJB1TXGEnVy1S1JpOfNrcp6PLx+QlU5KH:dNjIiBF22OoliFdlXlVy1S3oU6PLxJUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d594d7fb7aca2efb76cb6821aef2207_JaffaCakes118

Files

8d594d7fb7aca2efb76cb6821aef2207_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Ben\Desktop\Data protection2\Data protection\obj\Release\Data protection.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ