ab183c58cd23c8ac84771261de1e49f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab183c58cd23c8ac84771261de1e49f3_JaffaCakes118
Size

20KB
MD5

ab183c58cd23c8ac84771261de1e49f3
SHA1

e651acafc1ed0c836c1d16734af5675c4dc5160c
SHA256

91d9820880dbf2eea6200f47da668fbd062aa87ce5be77817b8f4a320a2e9593
SHA512

9cf9c64ea11c7122c4c65a058cd3fd9f5d5d53dc00deb3e2384a87040afb37c8fce73e6a15775fd97e1cb4ad27ae49533a0bde85fd98d7334833051550f586e5
SSDEEP

384:ddoDdPm6+18ZLLf45lLvf/78OYiKYCRr/J1djTCzYcHeIm:ddgdPmFQPO/KYCf1dqzYcHeIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab183c58cd23c8ac84771261de1e49f3_JaffaCakes118

Files

ab183c58cd23c8ac84771261de1e49f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cs2011\teste\csvb\csvb\obj\x86\Release\csvb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ