bbc10155f3640991761266b2b1c71672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbc10155f3640991761266b2b1c71672_JaffaCakes118
Size

1.1MB
MD5

bbc10155f3640991761266b2b1c71672
SHA1

1e219c54b8dcd9ddbb9b652829fe3a983c00b341
SHA256

f3128a2f1db4f2d83f0304c71e27c6e64dacb04251d86b1ca16a42aa3ef525ef
SHA512

6209658a9b3a130c812c9e14d213e83acd6eaacf5bb9e8733caf3cb770c604637280bc2fc7ccd3613c7b10771923abe9ee3951b53af26766214ad7a087e38017
SSDEEP

12288:hjMJEosouVIQ7oMoAjMU0d9Na02D/I9aQzWTPx7oS4JItR7megEN/sT0:hYanEOTFYu/IROP52I7Uk/sQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc10155f3640991761266b2b1c71672_JaffaCakes118

Files

bbc10155f3640991761266b2b1c71672_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\psf\Home\Documents\Visual Studio 2010\Projects\iPhoneDevARapp - Arabic\iPhoneDevARapp\obj\x86\Release\iPhoneDevARapp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 789KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ