da5c2a99c08d8f98bd2b4e919268523d_JaffaCakes118 | Triage

Sharing

General

Target

da5c2a99c08d8f98bd2b4e919268523d_JaffaCakes118
Size

18KB
MD5

da5c2a99c08d8f98bd2b4e919268523d
SHA1

1bc2e9443cf2b4c83343716629861b39437ff7a8
SHA256

0d5281b2e189017d2ed1b015a0db76fd05066f7e1d5e228574d2dacf01073eae
SHA512

2d149084f755266e92c334989564928a9dbf1ab4e95e93e60306d983ff8e5cd602bb50855ef6c89ded4407e94675dabaca0af120716fa86342a4cee514aeaab9
SSDEEP

384:USQIJqZBlCrB6WaOJLf45yQfhv8hTT3jkk:ZQIJqZBl65ZzTk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da5c2a99c08d8f98bd2b4e919268523d_JaffaCakes118

Files

da5c2a99c08d8f98bd2b4e919268523d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Kujna\Documents\Visual Studio 2008\Projects\ScreenSaver\ScreenSaver\ScreenSaver\obj\Release\ScreenSaver.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ