dacd3a5190ef46f37fbf93f1ab44e72c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dacd3a5190ef46f37fbf93f1ab44e72c_JaffaCakes118
Size

1.8MB
MD5

dacd3a5190ef46f37fbf93f1ab44e72c
SHA1

db1af87d7eca163b2e30ea79c96c898f10b55ed6
SHA256

101ebddd343c58464e7903dc9fbedcd3d43c819483c11be72a4cd16663ee2fe7
SHA512

6117d1dc6d7682161f07dfe74c57f21323ac51f012a6ee252a85242778be924ee7cb80619e371ceb119b825956dcd40d7a86f619f27ae395a91edbbbb0d209fb
SSDEEP

24576:iKT3lqTzWLFexo6qxUKPDoAE9KmsmptdUafVFle91PV1MvPHB3td96bCLIWPXsMN:X38xvcop0a+14/SmJtaw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dacd3a5190ef46f37fbf93f1ab44e72c_JaffaCakes118

Files

dacd3a5190ef46f37fbf93f1ab44e72c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\3.0\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ