ad3e6e066b42111576c852c949cd0b16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad3e6e066b42111576c852c949cd0b16_JaffaCakes118
Size

111KB
MD5

ad3e6e066b42111576c852c949cd0b16
SHA1

c08fd2ab98982d3041bff7e1ec06b0ae480ec4ba
SHA256

53c901cdc8556d21273f1cba1b46e425b680c1fa7601841567423e098dd83c16
SHA512

a6a31496278e10a80d1b3cdaf3407a4362a6a7f78dac7afef376f98a1e60f274f62be012ed361238b46cb128937c0693abf0d6f5a21805a0d4e5f39f99332e41
SSDEEP

768:8LJYOWaiwUG+JGAV6vbS+7sX77t7WYMrPdMF0qiAwqXWAaHlAT5NC2eXRpxLf3A9:88aiwUwM+bS+7uzMxMFxOqX837eUw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad3e6e066b42111576c852c949cd0b16_JaffaCakes118

Files

ad3e6e066b42111576c852c949cd0b16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\rlawing\Desktop\Total Tech Utilities\obj\Debug\Total Tech Utilities.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ