1557ae2361062c54c28ec2259e643388_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1557ae2361062c54c28ec2259e643388_JaffaCakes118
Size

273KB
MD5

1557ae2361062c54c28ec2259e643388
SHA1

efea49226b1743871827e271d83f0ca32df24788
SHA256

947c239dc6ff900555267c84607e9ce5e543ca416e9d7869255e4bcbe0235919
SHA512

066f61407c1bb72b6ddf2ea1f91048195d019ff478f99eeda1c6fa16a05f3666c48fa5bf803f54c4fb8ff50cdecb1baba60277a2246665a9bbfa92ae5608aa6a
SSDEEP

3072:xeX1RwoGoq2SSASJ2CC06uHzM1MupBzGaTJFpe7AqkG5NFqCJf5ETOLK9UNjNH5T:xexATi5FR52UpNccqRAJfT639Vi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1557ae2361062c54c28ec2259e643388_JaffaCakes118

Files

1557ae2361062c54c28ec2259e643388_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\WindowsFormsApplication33\WindowsFormsApplication33\obj\Debug\googleupdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ