a92d26a0692514fab8c2a297d3f2b9ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a92d26a0692514fab8c2a297d3f2b9ef_JaffaCakes118
Size

222KB
MD5

a92d26a0692514fab8c2a297d3f2b9ef
SHA1

047fd470a1df9eaad99785343f1eea28d8c00cf9
SHA256

89a36a7cd5f0053348a33f59a4ec9118e4d0e07af8f8b52e2c708a05a4260ba2
SHA512

f8b226c0faac505da57a9e059f438cafdeb8e90ce3bdf37f9066d7384a89397f593993d89bbfc0359907f73bd7fcf00a543a4674c4ac8160e3821bc3bc484c63
SSDEEP

3072:zYY3YEfReUuwKXhEBpsIMIPUxwe2UekXHoV/CT237dB8USXB2Megwwf:oE5e5RGTMjwe2Uekj237fCX0Mj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a92d26a0692514fab8c2a297d3f2b9ef_JaffaCakes118

Files

a92d26a0692514fab8c2a297d3f2b9ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\d2\My Documents\Visual Studio 2008\Projects\Resources\Resources\obj\Debug\poza1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ