a69dac980a3f7a00d38fc0a5912168d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a69dac980a3f7a00d38fc0a5912168d1_JaffaCakes118
Size

86KB
MD5

a69dac980a3f7a00d38fc0a5912168d1
SHA1

57acbfa3ad4309c1688cbecb68b8d75445dd63cd
SHA256

7a1ed4417285609125a21cfeb78f6e8d3031ddb526c5dd240dab6ccb712a7ab0
SHA512

9b7e104f3f0d8f54128cf39a88285dad818065a74220280db94f45468d6636a0769f47277fceecd95fba38a1a501e52793b74044aa8a83b6dc5be8cd8cae1d9d
SSDEEP

1536:0WQB0RdzmCpJ7oPf2PnR/qRy24uBTWEFiaLw1bcYfAgmQyG8baz:0WE03LX7bR/qgNqTNFhM1bcSjyG8baz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a69dac980a3f7a00d38fc0a5912168d1_JaffaCakes118

Files

a69dac980a3f7a00d38fc0a5912168d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\USER\Documents\Visual Studio 2010\Projects\ePsmpVfEBbD7JvU35\ePsmpVfEBbD7JvU35\obj\x86\Release\ePsmpVfEBbD7JvU35.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ