168711aa8d4610e95868f6bae67539e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

168711aa8d4610e95868f6bae67539e1_JaffaCakes118
Size

426KB
MD5

168711aa8d4610e95868f6bae67539e1
SHA1

6bee1ed509e21323a36acf6ca2341dc1d02c9659
SHA256

f5aedb3116e06e74144e4a3c41a8fd70d3002e29184de5aec1bd9aec49c626e1
SHA512

d76588e1cc8890e9b6a63c9ed503be03fd0d32c61290978b6d873d3661194e1ff67832dbd21e9cd2b6dec9bf32c98232277eaddd799de8c75a4a8b5082e26536
SSDEEP

1536:HQ9bC55oFbFt2Efr856jn/XGcLF06pjM3ttq0p40BmWNWS+SD3jn/XGcLF06pjMO:HQ9b4GS56jpF06AEWYSdD3jpF06AE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
168711aa8d4610e95868f6bae67539e1_JaffaCakes118

Files

168711aa8d4610e95868f6bae67539e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\PHOENIX_XP\Desktop\VERSAPRO\VersaProSnutz\N3 InjeX\obj\Release\VersaPro.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ