24d676b9220040113dd59ff65591dfbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d676b9220040113dd59ff65591dfbf_JaffaCakes118
Size

24KB
MD5

24d676b9220040113dd59ff65591dfbf
SHA1

cf5e0e9b0a1acde97fe5953b4364f2daa59c13d7
SHA256

702318863704fb53a30260817773928310c0ea48aa90db675a2bfe2feed3da16
SHA512

408d3de5614abdc340fd0551a5a32d4b45f537c17c2e2745f29fe52270cc23b4f6f0eb2748f40fe9d776e62eb511a00a97cf1e6b9b07a112d48b5c25e6cab3af
SSDEEP

384:sNbP0sqHOIF23wEuQc55suVZRxM7Mdp1aZaLf451G4FcwdzRrVffzJAOjyyuqb0J:EbP0sqHOIF23wEzc55subRxM7Mh5IdXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d676b9220040113dd59ff65591dfbf_JaffaCakes118

Files

24d676b9220040113dd59ff65591dfbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jamie\Documents\Visual Studio 2008\Projects\WindowsApplication15\WindowsApplication15\obj\Release\WindowsApplication15.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ