b761117017e02925ce4ba71cea7fc111_JaffaCakes118 | Triage

Sharing

General

Target

b761117017e02925ce4ba71cea7fc111_JaffaCakes118
Size

826KB
MD5

b761117017e02925ce4ba71cea7fc111
SHA1

01dbf89f51965a66fd40d32e1c2ff69f89181ee7
SHA256

2d75fe685659284904202c3e49037545b2deaf305799fa544db675eb7da9cbed
SHA512

3280cc9f659ba7daa8e8a12e9b0f0b9b7b5940dc50a5892864560fc92c5cd3114f78ff62f262b4c3a02b0c820b1dad2525c4d6c6920771e1df476bdad9aa928a
SSDEEP

12288:sg61ikvvAAiJ9yk47kPfJKqg61ikvvAAiJ9yk47kPfJ:sg6osvAAYu7k3Jdg6osvAAYu7k3J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b761117017e02925ce4ba71cea7fc111_JaffaCakes118

Files

b761117017e02925ce4ba71cea7fc111_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Gavin's\Documents\Visual Studio 2008\Projects\SPH Trainer Lite\SPH Trainer Lite\obj\Debug\SPH Trainer Lite.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ