ebbe7effe6fe11368bd734cdec71548e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebbe7effe6fe11368bd734cdec71548e_JaffaCakes118
Size

505KB
MD5

ebbe7effe6fe11368bd734cdec71548e
SHA1

c93837565ca0da1fa127ece4175fa566ab7c1a32
SHA256

ba8e4b927f913f669751668e286d205389e1e7a0f2b30a1f1956d47ffbeaf57e
SHA512

ed78cc14b0cb789acc5aa274089d255cc4b815daae1df486ddddbc38436c3a1615829faa4b592e4491a3ebe9e4a087a69d238fc6495cb296f5c54ffa17396ab7
SSDEEP

12288:UH4V9jSaOF6zlbx1RNFZxHRT2h8+JVC+EI7DVWPcAHDxJ2Pwn:UYVwtFkl91RNFZxHUh8+bjU/HGc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebbe7effe6fe11368bd734cdec71548e_JaffaCakes118

Files

ebbe7effe6fe11368bd734cdec71548e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Edubuntu\Local Settings\Application Data\Temporary Projects\buts\obj\Debug\buts.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ