ac72022b6feeed293a27bed57fde31f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac72022b6feeed293a27bed57fde31f3_JaffaCakes118
Size

299KB
MD5

ac72022b6feeed293a27bed57fde31f3
SHA1

be0f1ad866c550687eb0ef4f5cec188ba02a01c7
SHA256

438081502946dab5048854b39e00e71cb5dc4d37b4c5160ed8e94502fbd9c149
SHA512

7b3ecdb6e951e556bb904b7d9916bc5bbcc4d28b829e3099baf71732c6b656189dd7783169eeb9f9e02829ef4ab6526afd27c1415cf1338a2b0781479309a6f8
SSDEEP

3072:E/XDuI47+dnwttHjI22VCJ47PZQkZzyb9jBfyqL8IuS4NRVep/XDuI47+dnwttHj:aS7+an47xcRoXS4vOS7+an47xc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac72022b6feeed293a27bed57fde31f3_JaffaCakes118

Files

ac72022b6feeed293a27bed57fde31f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Nick\Documents\Visual Studio 2008\Projects\WindowsApplication4\WindowsApplication4\obj\Release\asdf345245egsdsdffgr46.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ