fbec7bd0eecdab67520e0f151ce7ae32_JaffaCakes118 | Triage

Sharing

General

Target

fbec7bd0eecdab67520e0f151ce7ae32_JaffaCakes118
Size

1.4MB
MD5

fbec7bd0eecdab67520e0f151ce7ae32
SHA1

ccae7b5e3e232586096f5be90daf0c4553bc95c1
SHA256

c017611992a9c283038d12b2bdb81806493813912b1140cfeab5b5f68aea5a54
SHA512

16afe455e79ff555dc4bfe1c1d089602a0272685ce867b84967a27a4f77b3ae59b1fb8cbab39b1dfb3c89962ef5b11090af53e81f0f86da8a3a751e669527fe2
SSDEEP

12288:QNYhJCDkUE/vLVra7l1glB6d2yDqEDgftv54FVMTxtTCMoDGE:Ph5TVI1glIwBE6pZt0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbec7bd0eecdab67520e0f151ce7ae32_JaffaCakes118

Files

fbec7bd0eecdab67520e0f151ce7ae32_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Slichice\Hakovanje\[2010] Hakovanje\Ecryption\S-Norton5\obj\x86\Release\Service32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ