ff2d2b43a053da82756b4ded7cc97084_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff2d2b43a053da82756b4ded7cc97084_JaffaCakes118
Size

342KB
MD5

ff2d2b43a053da82756b4ded7cc97084
SHA1

a9fc12df921a4b4e9e6d0c74ebebea726071d28a
SHA256

1bc8b665a32ed95b10609757a3988b128d6b8a1a5df51463aca49aadb54e8df4
SHA512

fa1a27b64490e0dd6f2ecc78cfc68a6f1a285db263a5dd745d7040f70d4c5d0c1d4b046702957a7aed21caa50fb866f51c0fd973a79c811ab0dbcf03ea723158
SSDEEP

6144:FJVEeJ4Z+MPDV8nbzqxAxZ4PpSyYO8lhcTAs3LUUV:FJVLqrPDABZkcnflHs3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff2d2b43a053da82756b4ded7cc97084_JaffaCakes118

Files

ff2d2b43a053da82756b4ded7cc97084_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2010\Projects\Junk\Junk\obj\x86\Release\apcstub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ