a82d1d7a36f06379be15c4dbb87880b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a82d1d7a36f06379be15c4dbb87880b1_JaffaCakes118
Size

208KB
MD5

a82d1d7a36f06379be15c4dbb87880b1
SHA1

202ac3cc5d4eb7d695d174c8b952a2c854807cfc
SHA256

03bcef28c391ebe08bce28216ff63450192bf0a03f2be4e5ea3c59625681eae4
SHA512

5c7289b332c9a6fdd65cba73bb6a1ecffb6e2c42e7676350197f3f75d0abfc504946de3cc6da0bdead3b0051e9e5dbb42d219943c21a4f1f194727231b0b7a96
SSDEEP

6144:hqCuDeyqCuDeQA8FF1mKVcsKVc2PqCuDejqCuDe4KqCuDe:h6Dl6DvFUKVDKV1P6Dy6D26D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a82d1d7a36f06379be15c4dbb87880b1_JaffaCakes118

Files

a82d1d7a36f06379be15c4dbb87880b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Justin\My Documents\Visual Studio 2008\Projects\smsspammer\smsspammer\obj\Release\smsspammer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ