dd2f44b2e85b6a3ec6886009a5facc69_JaffaCakes118 | Triage

Sharing

General

Target

dd2f44b2e85b6a3ec6886009a5facc69_JaffaCakes118
Size

327KB
MD5

dd2f44b2e85b6a3ec6886009a5facc69
SHA1

45652b54456ffc385ffef8d3f69e89889d5557d6
SHA256

fe2a15560ef0e6297a07e173d5c4188a7ca1816e1e4c81e846f369c0b0c35ea8
SHA512

e093577ad57fe977e0cd12444e454ad808a9599471a4850ac3b3d43a8f676d3c848fc2daa5abad4d724ae2922aa8d998f0b78b9721930d37939628b6037d589e
SSDEEP

6144:VvbwlMo34/XCe0LnEhlecHjLMdoVjtDPKrKrlH/t5BlP/dFZFgaAHhz3i6:qlMs4gnEzegwoLjKrKJ/7BlNFgaUhz3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd2f44b2e85b6a3ec6886009a5facc69_JaffaCakes118

Files

dd2f44b2e85b6a3ec6886009a5facc69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2008\Projects\Project1\AvG\AvG\obj\Release\AvG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ