c05fa2251bfa225865488fad75f068c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05fa2251bfa225865488fad75f068c1_JaffaCakes118
Size

724KB
MD5

c05fa2251bfa225865488fad75f068c1
SHA1

64082d6bf47c65cc225c41e5e4f7c90ae9c5989c
SHA256

0a93607df5f7af4795cfca8581820f3708c0145f2aed1aecbfd2d29deb6d68e5
SHA512

cc2429c840688fe11ae597ca2df360b540092c92f161060bf6b8fcca4890a14368ba9708503f6074a8e74cce1bcd93a6d4ac721fc4419cf4e39a449d002f0857
SSDEEP

12288:cC0xzYc2yDoyqn6LsUPgPhS7U0m6tZXH+Nfgb0N1b6MLf7pB:yxCydLsUPHAX6zH+zN1b6Mrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05fa2251bfa225865488fad75f068c1_JaffaCakes118

Files

c05fa2251bfa225865488fad75f068c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\ownz 1.6 src\1.8.0 src\bb1\bb1\obj\Release\Winlogon.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 693KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ