0a142e5995a7a8fac0b2067534b267fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a142e5995a7a8fac0b2067534b267fe_JaffaCakes118
Size

107KB
MD5

0a142e5995a7a8fac0b2067534b267fe
SHA1

e0c028daa138a78216ca64b35af28f57d2b4969d
SHA256

ae2386201f2bbc9bfabf2956e06491e8c8c1fdd8b1af3fc1f09b77cb6f2aee72
SHA512

05826b20981349b151ac6d8f03b101cda17fe1c8edc5ee4af2e76ed00a52a827bd70c7664876a370b50faf9d1e6ca350a95b377e88b21d3ef15efc2a400f1554
SSDEEP

1536:7yOsXIOFOy8fLMOrXnRXiFIVdOAYpznA:7y5IOMy8DMOrBSFI/Yhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a142e5995a7a8fac0b2067534b267fe_JaffaCakes118

Files

0a142e5995a7a8fac0b2067534b267fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Ghost\my documents\visual studio 2010\Projects\Mbartesi\Mbartesi\obj\x86\Release\Mbartesi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ