9525c22881cd478c74b8dfb4b0ffc666_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9525c22881cd478c74b8dfb4b0ffc666_JaffaCakes118
Size

53KB
MD5

9525c22881cd478c74b8dfb4b0ffc666
SHA1

48be5f6c4f95c0fe02f5db8a69c5251684456cc6
SHA256

d217b5bbbe94b1f79ffe8da14d2387af71e0c9afd3639daed23f83793e756c9f
SHA512

53a2b2b742fecd9110de63f83041fae5499b4c24a7ddb224f686cd43622335af6ab7b8bcd2392603b8aef01ede338cc8c7978a697ac23846f036a2ab0857e112
SSDEEP

1536:QShg2VOoOoOoeEjIX46Dnq+2PKscqU3N:lnbbbeCIX4Yq+2ZcVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9525c22881cd478c74b8dfb4b0ffc666_JaffaCakes118

Files

9525c22881cd478c74b8dfb4b0ffc666_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Simon\Documents\Visual Studio 2010\Projects\Generator\Generator\obj\x86\Release\Generator - SEBoard.com.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ