d108262de530d346b73ae9c4fcaaffa5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d108262de530d346b73ae9c4fcaaffa5_JaffaCakes118
Size

38KB
MD5

d108262de530d346b73ae9c4fcaaffa5
SHA1

67fdbf4af70eab4b8aa94e548689d24ae3997fb0
SHA256

5b2c12f0bb5682d6727898195c8ccdd52a852933aa74bdfa6fc67da8b7879aa5
SHA512

a02d55c068632fbba9f99ebbab171bdf28508dd1391825796471a16051a39479b87066c4cc124f9dd1cb17f0be86d4e8d01d135f66a185441bac7d77441a751a
SSDEEP

384:STvwtokwBwq6ucZRYiwAIpwAIqMb0oEPCyMUDSCbTzdav3JwLvpMQxQYexOYLk2N:XLw7PjbTzdaf2vp2xOM2XPwdL1VhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d108262de530d346b73ae9c4fcaaffa5_JaffaCakes118

Files

d108262de530d346b73ae9c4fcaaffa5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Davids\Documents\Visual Studio 2010\Projects\SQIDE\SQIDE\obj\x86\Debug\Squirrelz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ