0b862c3d62704b7a2dfa0524f7410111_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b862c3d62704b7a2dfa0524f7410111_JaffaCakes118
Size

212KB
MD5

0b862c3d62704b7a2dfa0524f7410111
SHA1

35ffce3ba718d942e0273862ec77eff163392ba3
SHA256

7a9a57f8fffba61bd043a96a6e0812576eac4bab667ec6caee24420692605d0d
SHA512

5f9c028caaab613b461277b5e37db69729a4855aa4b77334bce354f480373bc13bd7e6f2f7dfd65cce3ed6392fbfd47c0d1b48ccf39585670f2251124e629c9c
SSDEEP

3072:KMaO4GGDWGSEE7e4IRgMVJ8SabywBh/+tMNS/Fe1Wm3RftIxEYvfu9+vprxCMZJg:mVzdg4OSMyqF+iNqUDP6fdEj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b862c3d62704b7a2dfa0524f7410111_JaffaCakes118

Files

0b862c3d62704b7a2dfa0524f7410111_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\3.1 src\WindowsApplication1\WindowsApplication1\obj\Debug\csrss.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ