c012cabee30e97fe181343155c4f7891_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c012cabee30e97fe181343155c4f7891_JaffaCakes118
Size

769KB
MD5

c012cabee30e97fe181343155c4f7891
SHA1

435881f7fe43a615ab20f8a2b72bc677203f6ec4
SHA256

5cef59031196f07cecda869a75398d5fbc3545e50572b4b57f96fa172713c4a3
SHA512

4fc527db1f5a038e569a0568c989e90e5c553cb6a514284eb6a0d77e0d69831877ec1a4fc90212e4fb28bffcc8ac05ce03fbc2cd237582ed1c4507b478a7db70
SSDEEP

12288:YmGVoBs+MpzWfg0G1d6sjlvphk1CXc2GXNO/DXVuhEUjA:YmGVcs+czbP1IcVkJ2GXNkDluhEUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c012cabee30e97fe181343155c4f7891_JaffaCakes118

Files

c012cabee30e97fe181343155c4f7891_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Adrian\Documents\Visual Studio 11\Projects\DataProtector\Project1\CS\obj\x86\Release\Project1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 724KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ