950015249a69fafba9daf477a4249fd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

950015249a69fafba9daf477a4249fd9_JaffaCakes118
Size

4KB
MD5

950015249a69fafba9daf477a4249fd9
SHA1

62ab2a7902a60614419334ab086ffb64be83f597
SHA256

1974fad9473716f0514d732eeeb966cc81e0afa74ef3ea1cbaaec9ff959dc1e5
SHA512

644787f3406fd6a9242c26cf948a453c4feb006c3afbec873484434efd0ff978d013c89477c08706ab1e983de597633d7de1166f1552e2aeee097094365cff28
SSDEEP

48:SroasVtWFudWSKsG6ELirLJBskhVq3qCSQK+6g4qT9l:9t0u0SKNj09Xq3qC7tCEl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
950015249a69fafba9daf477a4249fd9_JaffaCakes118

Files

950015249a69fafba9daf477a4249fd9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0b295a979ab89c4ed0feff7d425a97a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\programming\work\antiNOD\release\antiNOD.pdb

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

msvcr90

_crt_debugger_hook

Sections

.text
Size: 1024B - Virtual size: 623B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ