feb253b937d8a493e5b934f226eb0bd0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb253b937d8a493e5b934f226eb0bd0_JaffaCakes118
Size

383KB
MD5

feb253b937d8a493e5b934f226eb0bd0
SHA1

b770cef30acccf68af5bc56ee841a51c47a5e71e
SHA256

4a9a1e628602f99b4798a7a68c825299b15eaee54e20ed41b7183551d91e549b
SHA512

1ac49a2d634a38b1f5fb890c9eea713309544db04009e02fe3ac85ff9a346fb077ae3d666919fa1ef3793a3078c95498a9a0d70972c10aaf64f1db13ad59731e
SSDEEP

6144:MTX/4kQqYnrFQ146XYuqvOKNtqSkpETMnpahJYgL+PN2XbOIxQq2ov3f5eK9Gzho:8v4bOthO9MpETMpabaPNobrxQlov3hpm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb253b937d8a493e5b934f226eb0bd0_JaffaCakes118

Files

feb253b937d8a493e5b934f226eb0bd0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ayoub\Documents\Visual Studio 2010\Projects\WindowsApplication2\WindowsApplication2\obj\x86\Debug\WindowsApplication2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ