9706ffdf4448bd831154e162ead52b57_JaffaCakes118 | Triage

Sharing

General

Target

9706ffdf4448bd831154e162ead52b57_JaffaCakes118
Size

287KB
MD5

9706ffdf4448bd831154e162ead52b57
SHA1

f525e95aecb3df6f0bea1e0432dffed346696ac4
SHA256

df121cc667f234ce63b8edb6de2fc330cd83f04c602321db589f0708434f4e31
SHA512

ab13294f01deb0b93297e7cbd1d15c78c813ca1761221530b275b576b0f34d6f18604ec1a125d5b26deada3aff0eebe9a19d7f2ec608ca37ba0953e3706ea16c
SSDEEP

6144:aOYkzjY4Fq20bDVxrZr96JzL39qWs2RvnT6YApwQlI5X8UT01:lzU4FqPfrZrurrTT6LposUw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9706ffdf4448bd831154e162ead52b57_JaffaCakes118

Files

9706ffdf4448bd831154e162ead52b57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\DZ--ZD\Documents\Visual Studio 2008\Projects\steb\steb\obj\Debug\steb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ