afb3fa4abe9a7cb098d78b9575d3b1a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afb3fa4abe9a7cb098d78b9575d3b1a6_JaffaCakes118
Size

148KB
MD5

afb3fa4abe9a7cb098d78b9575d3b1a6
SHA1

3991a6a32d8f7079e7c925265a6d622a9cf2d1fb
SHA256

05f50c5c6c5cf9f63aa09cd62cc1c557a9b9004e21d5b986ed403d5ca1fd9594
SHA512

b2b486ab91729ded5d09b5b66b777dc03becea46afb9c5a7bae39ad092e35ad09402493b92c27bca422ac6489beb428f75d834e54f76163b90cda2917573371e
SSDEEP

3072:mtS7BF58iV7MvUJyJT3tyE1usMkaJdIqQlGIhr19:mYMvUJE9Z1eNgrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afb3fa4abe9a7cb098d78b9575d3b1a6_JaffaCakes118

Files

afb3fa4abe9a7cb098d78b9575d3b1a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\HOLA\Bureau\gfgfgf\WindowsApplication2\obj\Debug\WindowsApplication2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ