e1d7372544475170e298aaebea293506_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1d7372544475170e298aaebea293506_JaffaCakes118
Size

305KB
MD5

e1d7372544475170e298aaebea293506
SHA1

6639bcc664268bd6c51da6d7fb50f5fad8c32698
SHA256

9263e551b2826f35496d5c4829f921bca94e88a5fb69e411b0353e60fbeaadca
SHA512

879b8ee8b9ce54a1efe5ff16385cc7fce45e2e975e3cd88c93c113a8e38bb0093d23ecb78776417937718bad88c5adfce2acc5231c5be9e69e5d38cc864ef6d1
SSDEEP

6144:7lM+I9DZJ46mO/b42AHc6xAqEkZM8/GSl3DF45c74ZaZwySmqX/fBX6ntO+Inuv6:7lM+I5IOT42AHc6xARoJrmc7xZYmqvBt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1d7372544475170e298aaebea293506_JaffaCakes118

Files

e1d7372544475170e298aaebea293506_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\OnlyPrinzPorno\Documents\Visual Studio 2008\Projects\cptstb\cptstb\obj\Release\cptstb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ