ddb5a3aa7346b1a06e0e482a39f6191f_JaffaCakes118 | Triage

Sharing

General

Target

ddb5a3aa7346b1a06e0e482a39f6191f_JaffaCakes118
Size

445KB
MD5

ddb5a3aa7346b1a06e0e482a39f6191f
SHA1

85195eb799c2b6ba46cfcec3bb5b4df64ad2be2b
SHA256

148d818c7236c3ef0111aacbbdb767f602fc3263296f0e96c062b16bff696d0e
SHA512

ab4cf4882604d01cf54cfb7e7dff27f6bd526d025e513367b84c6f119204a53d83788813c7a340a136295f2c65e0c5aa74f85a48e801467753e989e681b53319
SSDEEP

6144:W8OsIt6oXb/lCv+LpfiUz+cBukKPUFZGSi1BoubOR6HhWzH8ft4YoP0HdRYPurla:esCjdpfiUzSkK5ZocJWzH+TdR1BS8I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddb5a3aa7346b1a06e0e482a39f6191f_JaffaCakes118

Files

ddb5a3aa7346b1a06e0e482a39f6191f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2010\Projects\G0D\G0D\obj\x86\Release\G0D.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ