dfed00c659e54acff606ccd44491bbdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfed00c659e54acff606ccd44491bbdb_JaffaCakes118
Size

69KB
MD5

dfed00c659e54acff606ccd44491bbdb
SHA1

6fa972d41c0ddee4019f44a32b0e318030982a97
SHA256

5e922217b788e65e14dfb55e9705bb5c5ad1a6f2286a31ea4d77673820311f88
SHA512

0dfa3fd9e8c88c99cc426c2809e66150137723c35d888d73bfd9e28fdf7883f56ad38a3053a2e0af50f92a6e88773b64550ddfe1523aa57021b867693997101f
SSDEEP

1536:29W2b+F/Qww7vANulrEhEc87peigDrr2fa5lli5:2p+FovWVhuleigDv28lli5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfed00c659e54acff606ccd44491bbdb_JaffaCakes118

Files

dfed00c659e54acff606ccd44491bbdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Alessandro\documents\visual studio 2010\Projects\Esempio3\Esempio3\obj\x86\Debug\Esempio3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ