95dc475a70e9097d784701aa1dab4e41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95dc475a70e9097d784701aa1dab4e41_JaffaCakes118
Size

505KB
MD5

95dc475a70e9097d784701aa1dab4e41
SHA1

3e5bba4e4bd7cf6496c44dabc004ceff1a11c908
SHA256

4a2ccfe993175d61055002bafb0edc8fac88880492ed8b0c876ba2a19d1f86f6
SHA512

013d02138dedbe6bde3ddf0b75f2af774a71d2cfc77a0b496da02e07941a25eba5f4686733b79468c670b065679330f76a7128462645531e1fe2bd45023ae339
SSDEEP

6144:qMgs0Mv3l1Mgs0Mv3lhMgs0Mv3l9NlMgs0MvXl:Z0Mv1o0Mv1s0Mv19K0MvV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95dc475a70e9097d784701aa1dab4e41_JaffaCakes118

Files

95dc475a70e9097d784701aa1dab4e41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Documents\Visual Studio 2010\Projects\prywatne\Activity Monitor\PAM\obj\Release\PAM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ