aff6ef3fe1a443405d2ffbb7ed45cb39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aff6ef3fe1a443405d2ffbb7ed45cb39_JaffaCakes118
Size

5.5MB
MD5

aff6ef3fe1a443405d2ffbb7ed45cb39
SHA1

6c910706a8972cbb943ae22034db074394f0c7b1
SHA256

9801f62110726c31ff3058a35909a30fe3b455da3245107ec6be54386ea08cfc
SHA512

bc0caa548d3694d4ae95f720b3e40764b8f5166f214f6ec3f5e0e006a91c2bca7127efd8483076ab9f0ec6ebc0da15f18e594b8c44164bbd93f06130db8c9aa2
SSDEEP

49152:ktAilRf09YCRkio3dPcMJDiwytYQmmraMlxTNmKtC+yII96+Gevjsjfa463Nf/du:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aff6ef3fe1a443405d2ffbb7ed45cb39_JaffaCakes118

Files

aff6ef3fe1a443405d2ffbb7ed45cb39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\Nouveau dossier (3)\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ