10ab130832399845dc08596f27a65ef6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10ab130832399845dc08596f27a65ef6_JaffaCakes118
Size

9KB
MD5

10ab130832399845dc08596f27a65ef6
SHA1

826941a56341e8db5e75f9352af17540f8afcfa9
SHA256

e944c9fc26e6cba08ee0c3fd17f856a077c316c1be3ff61c6dafb2137e471e2d
SHA512

c9a0504e2ad270fef77c7dde9694e6a922e0cd4f168e3756ba8680c2e8d293306c60f4c4c70f6169d142b6c8a995a24f7e34dba8203a8386d892df39d5ba68d8
SSDEEP

192:S2S7p7EiEQ908/PfAO6QRkSdnWyxIlkhdf0PPLdAZfI8LVt:fS99iwPfaQ2SlWyxsGdf0PjdAVRt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10ab130832399845dc08596f27a65ef6_JaffaCakes118

Files

10ab130832399845dc08596f27a65ef6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Keith\Documents\Visual Studio 2010\Projects\WindowsControll\WindowsControll\obj\x86\Debug\WindowsControll.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ