05da6ab4d79f2de73009aadc0de6a9c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05da6ab4d79f2de73009aadc0de6a9c9_JaffaCakes118
Size

15KB
MD5

05da6ab4d79f2de73009aadc0de6a9c9
SHA1

42531241ea9287941e3feb3d87d74efccd8a7501
SHA256

a922cd431030442884ff6586d6ae9643c9a9dae1a1ff5958ac37104f5ce7cf2d
SHA512

c81dcec326bbdb97502a4a39c796c203bc9750be94374ede316ebb7098a0af6b09c50f40fa22e189ff31a5bbdd75760ba7f3d05cbfd50738041c8b9bd50096e4
SSDEEP

192:X7zQBz10sSUltOdjgvkst97q70cxhOPZmvELKnloYU4bNJtIhRjwv82sPPWnb:X7kBz1jYcdOBekELf4JrQRjk82WWn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05da6ab4d79f2de73009aadc0de6a9c9_JaffaCakes118

Files

05da6ab4d79f2de73009aadc0de6a9c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\DATA\Visual Studio 08\TestForm\TestForm\obj\Release\TestForm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ