a82bc07bcc13fe6a14e7259e7eb3701d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a82bc07bcc13fe6a14e7259e7eb3701d_JaffaCakes118
Size

85KB
MD5

a82bc07bcc13fe6a14e7259e7eb3701d
SHA1

39b46b4f79abbd8cf2705e82c737eb55fb4df0ac
SHA256

a6c8ba48a175cf79aa526e4a4a8ebb2597e3fd0e4182834486086196db5da280
SHA512

2e9af6096bd661ebd0c84a54fe918f57d648d94fbdc9d58590f45678b0202d3ea119ac801299ece06390213a020f11a50e2c441a03177674f9616283fb4e33e7
SSDEEP

384:IZYlPsFercZssBpNZ0yDI3cW1B1vkvwKwq6ufZDhEmWyLlQcQ8VAAAAAskvwKwqN:xOdpvYOxD5MxD50xD5ZVxBFAjoxD5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a82bc07bcc13fe6a14e7259e7eb3701d_JaffaCakes118

Files

a82bc07bcc13fe6a14e7259e7eb3701d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\documents and settings\alex\мои документы\visual studio 2010\Projects\vtk-bot-pro-v4\vtk-bot-pro-v4\obj\x86\Debug\vtk-bot-pro.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ