c27f714e5134e5be170177dd8f6ca594_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c27f714e5134e5be170177dd8f6ca594_JaffaCakes118
Size

30KB
MD5

c27f714e5134e5be170177dd8f6ca594
SHA1

416edab640a1b7925592083904b83d5902a626b8
SHA256

a5c4dbcc4c547f1c015a9b6ffc8b8364694b607de79d55aa3b5e4b2c3a978f27
SHA512

5d94028e388331ca3a1daa84e2bcced62bf629a97bf22b7ff84aa2265b58adc797530e681aae8c0cf8d1d32095f874c6dde72c74b991dea76e9170dbec95eadb
SSDEEP

768:sG3EBkT6ROu7k27ymCKHfu9oBkaI183dDsc1BIn:sG3EBkTGrffu9otI2NDsXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c27f714e5134e5be170177dd8f6ca594_JaffaCakes118

Files

c27f714e5134e5be170177dd8f6ca594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\jcallesg\Escritorio\flu0.5b\flu-nucleo\flu-nucleo\obj\Release\flu-nucleo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ