bfc53fd2c68e456378da8b869a002125_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfc53fd2c68e456378da8b869a002125_JaffaCakes118
Size

473KB
MD5

bfc53fd2c68e456378da8b869a002125
SHA1

2c01a1e93beb227c2841cbfa4d9163cfdf18960a
SHA256

6dab5d3db0d79c21f2348d9800b6a8dfc0f47d40f3724af65a66cbc49b4cfd3f
SHA512

e3e5acfab1f62d352460c67a85d5146ec5879144018f39eab4de28dfeca664e6fca92b97e51e0069fa3eba0c29f2ad559a5f7e5ffe015fd71277dd54ca13f0f0
SSDEEP

12288:wvyaowrCc9RRadnDK9AMJ2rf1Wpi2Ckzqct:0yao6Pz8dDkA/1Wpi2CkzqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc53fd2c68e456378da8b869a002125_JaffaCakes118

Files

bfc53fd2c68e456378da8b869a002125_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Antoine\Pictures\Documents\Visual Studio 2010\Projects\ToolB\ToolB\obj\x86\Debug\ToolB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ