165d2c1a6542a880583d614e69800ab0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165d2c1a6542a880583d614e69800ab0_JaffaCakes118
Size

982KB
MD5

165d2c1a6542a880583d614e69800ab0
SHA1

631b452d651e2b8458156ffbcb2654fab8a1a56f
SHA256

8b5460e5c10690286dcc09a2fb3ef39625562fe7addb8a9b53a6f843fb59e146
SHA512

cd1695615ee4a40caaf469551780fa8c17bc18bfb4991a06eb99864631bdad9dc56cbf9155d575bf6d672e56d18c338d48c3f62121387a7a1ec5a0117c60b9d5
SSDEEP

12288:Lte381RQCiIVyKtQ/VQMmItZREyBEfxWdb/U840tptQR5liHmdwR0s9GFNFGFOFs:Je3816qVyrQM19BEfxWdU8VZFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165d2c1a6542a880583d614e69800ab0_JaffaCakes118

Files

165d2c1a6542a880583d614e69800ab0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\Documents\Visual Studio 2008\Projects\x23\x23\obj\Debug\sTt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 980KB - Virtual size: 979KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ