f65f71b42066b2dac2870370e92c714f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f65f71b42066b2dac2870370e92c714f_JaffaCakes118
Size

297KB
MD5

f65f71b42066b2dac2870370e92c714f
SHA1

3d5fdb4c4c348123e7369dd678ef1b22cff09389
SHA256

95dae86abba73250d7b9897494d5ba903597c2d9fe8055d4cbf0cc8e5ffe58cb
SHA512

1e397a3f852ca748656bb37e7e4a144739ffae1a9c829a0913823d3d3b4362e80d276bbe27d84443a01c9619b7549768738b2bc49335ffeebeaf7d193fde021d
SSDEEP

6144:tjCBoa+8cmz6Vk0BYhx82DzlesF1QdAxC2+Zwmz:tjCBoa+8cmz6Vk0BYhx82nl3bQdAxC2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f65f71b42066b2dac2870370e92c714f_JaffaCakes118

Files

f65f71b42066b2dac2870370e92c714f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FireLeaf\Documents\Visual Studio 2010\Projects\PESSwitch-LZ2010\PESSwitch-LZ2010\obj\x86\Release\lz2010x01.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE