afed220daab2981c6a7da98a9c4e7630_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afed220daab2981c6a7da98a9c4e7630_JaffaCakes118
Size

157KB
MD5

afed220daab2981c6a7da98a9c4e7630
SHA1

1ae154a29d6fd613e347ae1ebf87b6e2186e5000
SHA256

17cec7d5ae017cf04d1b57ae84b3f2bf9579d51c1f85685d13f5f68108824b46
SHA512

c89fc7423e28d02ba8c3d51bfdcf3d2faeb4e7781b38bafb7bb267f99170bf0f6a9b137ca523e9af9cac96c06f13320143431092113313f1968afd1e9b085dd9
SSDEEP

1536:b0um+BlwhCHlK96+nnM7CjrGVWybP4ZMO8wZF:2+PHlb+r1ZMO9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afed220daab2981c6a7da98a9c4e7630_JaffaCakes118

Files

afed220daab2981c6a7da98a9c4e7630_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\BUSINESS\WEBSITES\www.onclickurl.com\developement\vb.net facebook advertiser\Facebook Advertiser\obj\Release\Facebook Advertiser.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ