f6f0032b729edbed533290d9e92d317e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6f0032b729edbed533290d9e92d317e_JaffaCakes118
Size

697KB
MD5

f6f0032b729edbed533290d9e92d317e
SHA1

4e4f93d465c391f9c5e0457eee4c4a020632c139
SHA256

eea6e61a87ba4c8c827aaac6fad1509416f70d88baece97f3c9422f7a08485d4
SHA512

a6ead310a7aea5aacc1355d5ddb8ccf62be9b5353f7918cf66a5727f825cf1e676be28e0b739b0f6c1f5d5a9da3d302506d5d45f859fe59956d4d6690e3b8593
SSDEEP

12288:FmuTEOx58yi2XP7x+jYbTlbcZ3lE+TKOrvfyWeQ5kd8enQ4odI4x:FmnxyZ7xTbaZ3ltKdWT5kGeAdI4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6f0032b729edbed533290d9e92d317e_JaffaCakes118

Files

f6f0032b729edbed533290d9e92d317e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\nathu\Local Settings\Application Data\Temporary Projects\File\obj\Release\File.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ