d539eb1719e15f67574a9a91c71f7c6f_JaffaCakes118 | Triage

Sharing

General

Target

d539eb1719e15f67574a9a91c71f7c6f_JaffaCakes118
Size

395KB
MD5

d539eb1719e15f67574a9a91c71f7c6f
SHA1

8bdf364b870b688d8a7ebbd07c7f41d61bac4c1a
SHA256

46366f47b2e56703d78af253de89e33b563e728b523a66a5bb82fad0a056d135
SHA512

ffa01877c36773bfd3e8554c1341bcb5934f566c29ce938829a464a8a1439f8df555670f3a8b2faee81eb655500198839e6ef15934149c7aa08193e33390a534
SSDEEP

6144:BqoB+XuJd1W+lUHEmE9mB8PxHZh3XwkSCJ5HgP+e0ETiXRldNeD9f:B5qE38sxPFHQsgGe0EEMf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d539eb1719e15f67574a9a91c71f7c6f_JaffaCakes118

Files

d539eb1719e15f67574a9a91c71f7c6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator.EXPERIENCE\My Documents\Visual Studio 2008\Projects\List Manager\List Manager\obj\Debug\List Manager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ