a10d1b7b70087b0dcf36e39f2f0d2fbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a10d1b7b70087b0dcf36e39f2f0d2fbd_JaffaCakes118
Size

338KB
MD5

a10d1b7b70087b0dcf36e39f2f0d2fbd
SHA1

26d42f620b381aa0cae77a98833ebff52879f18f
SHA256

9388949338c341c0a91e2ef911293dbf0f998f90bc940f991e0f3672580a5523
SHA512

1ffeb27cb4f8f7aa97e3229eda75cf41e5a874a0b6db437f2e27d68825caa5dbf22caa9440cc3a9f0fc871c5acfbeb794a0f1ead630c04e0f4fbc5607a6bc85b
SSDEEP

6144:h/ZUAebo2jG0TFGb/R0I+oSdc1jcFZSSm618Uw3K13C9WOPSPjt2:h/CAeY0RGDOI+oTOZy61r+KmWSSPjt2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a10d1b7b70087b0dcf36e39f2f0d2fbd_JaffaCakes118

Files

a10d1b7b70087b0dcf36e39f2f0d2fbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\1.8.8 src\bb1\bb1\obj\Release\System.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ