10454834e7df90887fa2eeef289adc80_JaffaCakes118 | Triage

Sharing

General

Target

10454834e7df90887fa2eeef289adc80_JaffaCakes118
Size

50KB
MD5

10454834e7df90887fa2eeef289adc80
SHA1

1249516eb05a6c4a6c0e8d1aeea162cc09271fa8
SHA256

b92bef649cc3151ee3bc5c41e2bea7d46607c2a836563d697dd090652a3aaf46
SHA512

e80cfab6fff5c076ed8fa2d9cd1c06c7fd2400bd698e28635eb6e8aa48b762a196ca4acd2a036809e0681a10aee35b0c754bff6b2856c73550e1de06a48107eb
SSDEEP

768:BGNO53SpyDI/DM/FJGQSD8/uqNFTrsi79OCmKpJy1:n5rmDMLGHk5Vs29OCvpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10454834e7df90887fa2eeef289adc80_JaffaCakes118

Files

10454834e7df90887fa2eeef289adc80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Documents and Settings\PC-Admin\My Documents\Visual Studio 2008\Projects\GNStub1\GNStub1\obj\Release\avscan.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ