376f863ed0530680556b91bc62b12cdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

376f863ed0530680556b91bc62b12cdd_JaffaCakes118
Size

552KB
MD5

376f863ed0530680556b91bc62b12cdd
SHA1

9d230fa072be504942fd3a70a0014f7d5bd72a58
SHA256

b852ad18e79050df8fefa17411bb5ad50e960b4ecb1777737df7416020e50808
SHA512

b4403f3251c2af4d7169358326f8712535879eb883c6a8e807c773311f04c3eabcfc81079f9be21232d712569303d6ab1aacd8ca370c513cd59cf172cfdd216b
SSDEEP

12288:MGk8UiZ3bjHD3bjHS7Va7VJ5IUZ3bjHS7VJ:m8UiBb3bm787CUBbm7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376f863ed0530680556b91bc62b12cdd_JaffaCakes118

Files

376f863ed0530680556b91bc62b12cdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Data\Zipper\Programmering\FastAccess\Trunk\FastAccessInfo_1.1\obj\Debug\FastAccessInfo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 380KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ