d10bacd9d55b5c4a2c17ee2279cd66a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d10bacd9d55b5c4a2c17ee2279cd66a6_JaffaCakes118
Size

704KB
MD5

d10bacd9d55b5c4a2c17ee2279cd66a6
SHA1

f0e86e420d001a6662f39274155c5f76db82bd09
SHA256

dc3c2991f8119dce85c522b95798cc4b62df3c25a8ac033b1a39e83c0a6765e9
SHA512

77713e67eb212d9c3047cdbd43b6af77c0f4db77f10d3a2e54b491abb40af5241f59edb9d9578de8a4ddd71408da30961fdf900c0279e2a9458390f1a1df3864
SSDEEP

1536:m5QdMEiMxlmkf45IR6WK9nAW99sKrOvcKdbupBx:MpEiMxnf45SKdAW99shRkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d10bacd9d55b5c4a2c17ee2279cd66a6_JaffaCakes118

Files

d10bacd9d55b5c4a2c17ee2279cd66a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\CHILL\Documents\Visual Studio 2008\Projects\unique\ResBegleiter\ResBegleiter\obj\x86\Release\Devi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ