b036e1396e3ec65262d5a7d15022397d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b036e1396e3ec65262d5a7d15022397d_JaffaCakes118
Size

359KB
MD5

b036e1396e3ec65262d5a7d15022397d
SHA1

b30f0909c6b5a5a337aade5c1f3c440363c4ef4d
SHA256

54e23a45fb853de8464890bdd3e1efc9eda8888f0284253f6a723961dbc715bd
SHA512

fb38fe8b6bdb909f2df96ae4efae7ebdc664b009d7b6b6897a919cfdd1bfa0f05ec73dd06e413ac5ea939f47e4419d3f0d6583d655afd88e838085f1eda7ca27
SSDEEP

3072:0Hj3YpnjzF92zp22IbBZ+ciCCHj3YpnjzF92zp22IF:0HDYFiz0ZEHDYFizY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b036e1396e3ec65262d5a7d15022397d_JaffaCakes118

Files

b036e1396e3ec65262d5a7d15022397d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dokumente und Einstellungen\Michael\Eigene Dateien\Visual Studio 2008\Projects\Fake Tool Generator Final\Rapidshare Points Producer v1.0\obj\Release\Rapidshare Points Producer v1.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ