feccd98caef45d4750a01d204ec937c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feccd98caef45d4750a01d204ec937c4_JaffaCakes118
Size

958KB
MD5

feccd98caef45d4750a01d204ec937c4
SHA1

0c149b2d03eb3f6ede1a3d754157551badaf8f36
SHA256

70c08be69579af4ffc51b99abe7066dd54e9a5c630a268aebb4e37c3b4a49a66
SHA512

a6a3c636be7863cdbf173f607ed9afc11b83ff21e0d7294d0bbb05f6977aa48c817dedfa3f1810798b8e10ada067641ba37ba98bab178dacf9cb0e6f2516b0b3
SSDEEP

12288:6f6dZ7vpeE3RPfAPip4O+dadZgBOdSJsOIwaxxCLK76lzKP7SdCTtQmznxoH3:m6dveE3RfAPihd1goAzGc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feccd98caef45d4750a01d204ec937c4_JaffaCakes118

Files

feccd98caef45d4750a01d204ec937c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Roshan\documents\visual studio 2010\Projects\Chrrm4\Chrrm4\obj\x86\Debug\Chrrm4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ