fa12db95850c6d73e8f6eb8ae17e0477_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa12db95850c6d73e8f6eb8ae17e0477_JaffaCakes118
Size

206KB
MD5

fa12db95850c6d73e8f6eb8ae17e0477
SHA1

3a357530e7a7914ec2974fd7dcbd24d78b51a35b
SHA256

3aa768cbae9beadb301b4bf6ac5d733dd70bd1c237a592cf66393d4eaac88016
SHA512

7adcda6f0f0674e75baced12f47c1bf83e6e2762497bcd7c2b9c2f7b83cd13bd780fff3726927f8925c18c73f4a62847cc523aecc8474eb50fe13febe6b27e2b
SSDEEP

3072:YdqkbBkItAVP/TXW5ks5sN6K0nNjg55rB0XIFtsPLT6SlF:YdRtABbXwks6IK0nNU5iX7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa12db95850c6d73e8f6eb8ae17e0477_JaffaCakes118

Files

fa12db95850c6d73e8f6eb8ae17e0477_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\Nouveau dossier (3)\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ