fc7f53497b9287e6f9c48e4d0e81520b_JaffaCakes118 | Triage

Sharing

General

Target

fc7f53497b9287e6f9c48e4d0e81520b_JaffaCakes118
Size

40KB
MD5

fc7f53497b9287e6f9c48e4d0e81520b
SHA1

ae779f62c23c34350ff30e61042d7b449eb40762
SHA256

298d1b2eff82a81a0f04a11c39b6166fcf45439f8e24bfa320587d9e02a72a8e
SHA512

03374dcd4b02389b995249bbb37ef006d271aaf5903f232d1e4f0c8888dfbbca765e2ef0ae46d82ae8f6620006a7e7382a02d4f6f38ad90cf8c290b1f9061a46
SSDEEP

768:KpD+Zwq3r1uFbaYh+Jnq7az+xRug+n2hpUE+fDNkQp6HwfCiQLzR:wD+HZuY5q7az+GgDbUfZkQTfCiQLzR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc7f53497b9287e6f9c48e4d0e81520b_JaffaCakes118

Files

fc7f53497b9287e6f9c48e4d0e81520b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\user\Documents\Visual Studio 2012\Projects\helo\helo\obj\Debug\helo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ