d30b2635874071bc14077678bec52a3c_JaffaCakes118 | Triage

Sharing

General

Target

d30b2635874071bc14077678bec52a3c_JaffaCakes118
Size

46KB
MD5

d30b2635874071bc14077678bec52a3c
SHA1

f0f87b36eee34aab8e4df6bb26f4cddb2aaadbd7
SHA256

522368c63afd804c949889c0316b113d4019d720b76fec1d773a94b7eee1f94e
SHA512

96ac23320acf15b7cfca1b41a954539098faa37b3fc627e5f6536518a9913b4723cc0c53b9c2b0fd3602890e8d06d332952ed7b0ab529520bb2b13862995f1eb
SSDEEP

768:rMpD+Zwq3r1uFbaYh+Jnq7az+xRug+n2hpUE+fDNkQp6HwfYTpP3KoDHQPc+e4Z:rmD+HZuY5q7az+GgDbUfZkQTfApP3KoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d30b2635874071bc14077678bec52a3c_JaffaCakes118

Files

d30b2635874071bc14077678bec52a3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\user\Documents\Visual Studio 2012\Projects\WindowsFormsApplication195\WindowsFormsApplication195\obj\Debug\WindowsFormsApplication195.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ