a6e0c289e8003b659b5989033d716ab9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6e0c289e8003b659b5989033d716ab9_JaffaCakes118
Size

288KB
MD5

a6e0c289e8003b659b5989033d716ab9
SHA1

54c2ac53ccd35d82326daf5be4a60f1aaba1ab22
SHA256

686b8b0d6fac25f8de84f00e671cd5bb30aecf40bc968cd61c9c5e0bc866525f
SHA512

47adee9859b54122633e5fc68148ed8bf7da81a4d63ae321d5f8075fa7fc30748afb4e3c179277128cd1f8f26d27e96ef33881cb286116da897115fefcac9f4a
SSDEEP

6144:/sShZWyrW/gjzboTIY7iO0GEYK3iUK9hjilHelJV18aUPqwoFo:/j3Y3pQSUK9KelJV18auuo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6e0c289e8003b659b5989033d716ab9_JaffaCakes118

Files

a6e0c289e8003b659b5989033d716ab9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tor\Documents\Visual Studio 2008\Projects\Balle\obj\x86\Debug\Balle2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ