feed176e0f84650b0c2ff11f54d707ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feed176e0f84650b0c2ff11f54d707ab_JaffaCakes118
Size

32KB
MD5

feed176e0f84650b0c2ff11f54d707ab
SHA1

b82d52a82f2bdc3dac9d96d194d172eda6d74138
SHA256

a802a00fa8ab52793b20809a4647a4bf34d35b48df09ae5c9c265168960f26ea
SHA512

9a41ce9ce9d13631289ee66e1908bb789953e2f9e2751df069b1af3c0f5639ee02aa1e1eca714b7b02020147e569a67bf887f280acca742a9e954aab1248a2f0
SSDEEP

768:RlemE5fuq+r4LM4qi7cCrysDh044yKjD4htMH48lvYm8c9xcDrA1Ai:NEc4LM4jVDW44yKjM8lAm8c9xAAui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feed176e0f84650b0c2ff11f54d707ab_JaffaCakes118

Files

feed176e0f84650b0c2ff11f54d707ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Visual Studio 2008\Projects\ABC-Bot LITE\ABC-Bot LITE\obj\Release\ABC-Bot LITE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ