26e2fda03f04f496505bc49828718347_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26e2fda03f04f496505bc49828718347_JaffaCakes118
Size

70KB
MD5

26e2fda03f04f496505bc49828718347
SHA1

ea940590484faa1f5a8464ee8b9bc82978724f53
SHA256

1dc623f7803f38c3e5c1552e5d0b1f299f8c06fd6e61a074d103cc2c57cac5b8
SHA512

8e0e7bfc661392889147d6a65e31e29cea38dabbff8aa662193a02a166a211156f4aa17a62b1bc8836f0837cd696c8a0d9a2f8c1526ed2061bfe07acf868bcb7
SSDEEP

1536:U4Fg6VoNRDoqkSZZZ3gdtibJVGoNRDoqkSZZZ3gdtibK:/Fg6VoNRDuUlbbGoNRDuUlbK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e2fda03f04f496505bc49828718347_JaffaCakes118

Files

26e2fda03f04f496505bc49828718347_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\isra\Documents\Visual Studio 2008\Projects\installer_v2\trunk\Installer\obj\x86\Release\Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ