b8bb18526396a70a9cb55ad02dd67958_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8bb18526396a70a9cb55ad02dd67958_JaffaCakes118
Size

289KB
MD5

b8bb18526396a70a9cb55ad02dd67958
SHA1

08fdb5f1afd8c15ce9e052524038d425cd8a7fde
SHA256

58badd1abdfbd8ac3e003e35ea6075a3f24ac22f818c60eee43f5136ef2b6a9e
SHA512

4c290493bd02759d0286c8666434064944945e92ff2d1d54ee6bbbfbac9451fe2d5c3853cfb8ede3d612c25ee67988b7e8e4d1cca84d9a798eb9d25089f2bd90
SSDEEP

6144:8IKUdGJQN6pTfySdf5NZJfjvEyBg74/+ISh3rX7lpitdnrh:TdaQN6p3f/fjvTBgu+/hlpitFh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8bb18526396a70a9cb55ad02dd67958_JaffaCakes118

Files

b8bb18526396a70a9cb55ad02dd67958_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Documents and Settings\xFeDeRiCox\Desktop\WindowsApplication1\WindowsApplication1\obj\Release\fede.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ