282766a498503c5cbc79171564bfb8ba_JaffaCakes118 | Triage

Sharing

General

Target

282766a498503c5cbc79171564bfb8ba_JaffaCakes118
Size

291KB
MD5

282766a498503c5cbc79171564bfb8ba
SHA1

6b487a6930731415b4b8d612f15bf48843c71d4c
SHA256

6a20d8c7516857594a238228c44ca4ca39fd30ad6f7add9157e65fc939a7e8bf
SHA512

226c324ac1fc741cddd34e489d9b46b91686cf84bb1805f3eb56c841d1f1c68604ddf0f865e9c515186b91f9ab60c2f0b22fe750f581932b638a9b58b7541ee4
SSDEEP

6144:OT9VCYPSwlEG3CaVlDsPJy2vNSzhfVfsfglCV539h5e:SIYPSFm7oPJdQhfVfig2Rn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
282766a498503c5cbc79171564bfb8ba_JaffaCakes118

Files

282766a498503c5cbc79171564bfb8ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\nosferatus\Desktop\SC\SC\dependency\obj\Release\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ