13aa91b781f2a27a7ca101beb0aa11b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13aa91b781f2a27a7ca101beb0aa11b2_JaffaCakes118
Size

459KB
MD5

13aa91b781f2a27a7ca101beb0aa11b2
SHA1

49208c357df8dc04c044428dfb0ffaa12b510373
SHA256

6b97baa46d0c384321d1501ba8cbd705762b19dbae894ed56a9683c2067b837e
SHA512

f154b0ac54143e8540e2803b9d6afa81de87cc7532e35689e5dce2a3f48aba967c23e68387b4dbdd6bd30f0444af0c5da2c95bd2f7417abf95c2f287eb3dc0d0
SSDEEP

6144:WlJsf3FX92J/KpzXJfV6sueUkVGbT/GcTGUY6cvzknfIAweQv5tPvpqvMuo+on:Wl2NWQhbdVRwY6cvof6/H+Muon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13aa91b781f2a27a7ca101beb0aa11b2_JaffaCakes118

Files

13aa91b781f2a27a7ca101beb0aa11b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\sunjester\My Documents\Visual Studio 2008\Projects\Fustub\Fustub\obj\Release\Fustub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ