f6bc11090d7d08a15520764e7b4807d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6bc11090d7d08a15520764e7b4807d9_JaffaCakes118
Size

219KB
MD5

f6bc11090d7d08a15520764e7b4807d9
SHA1

589140d204b65f35cc418e70008108afad6159f1
SHA256

cc053e835a0dc113132f7cf1d474658bf785479fb49220d2176d9d38c74d30dd
SHA512

d7204ec68093ff6ea769f3f266b44413f44e7b8e3e241d885819a23522fc2d523219a596a9dfeff37420ef748fa072cedaa5a91c5a229af60d71dab557567449
SSDEEP

1536:tbJw0R8GU7QrRiMw17RCG+suMnzpQSbIeewpTac2L3eG+pswOmQwK0gm38PsKeae:F3RDU7qiMw1ESk3eG+TA7xsKeae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6bc11090d7d08a15520764e7b4807d9_JaffaCakes118

Files

f6bc11090d7d08a15520764e7b4807d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\Display URL data\Display URL data\obj\x86\Debug\Cumulus RealTime Data Grabber.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ