a19699a9aef386ece282f8af2fe3ee8a_JaffaCakes118 | Triage

Sharing

General

Target

a19699a9aef386ece282f8af2fe3ee8a_JaffaCakes118
Size

218KB
MD5

a19699a9aef386ece282f8af2fe3ee8a
SHA1

464f5495b906625d01e4a079731bdeab2e9fe27b
SHA256

93200227629a0eb5d7dab6d107ca4b88aab648e60d29b9e1cb44d8597b27d015
SHA512

df1f437036ab8979e05a54edb45d8f5d85f338d9a8aa7788bd57aed4e1c4e73c4a2c521955ba107cd37d62be41915d7c2d91e07c6e82dfb5bd7b8ac0e7c0b518
SSDEEP

3072:/cncpcncYlDQS/50Vi8ZFmXIcS2csU8RjoUVLseEVR7j/vrdIKDecFkVZ7TorDOL:FdjjN9A/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a19699a9aef386ece282f8af2fe3ee8a_JaffaCakes118

Files

a19699a9aef386ece282f8af2fe3ee8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\BCarvalho\Documents\Visual Studio 2008\Projects\Broners Runas\Broners RUNAS\RUNAS\obj\Release\Broners Runas.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ