3e32c6ed590909d7fcbe40981d394a28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e32c6ed590909d7fcbe40981d394a28_JaffaCakes118
Size

11KB
MD5

3e32c6ed590909d7fcbe40981d394a28
SHA1

e835d755a1068221aa8c5cd4c48b54ae41d41031
SHA256

ac3f8d4d328da7b98d49dad42068d50c9fcfdfd1ce0015cfb2b499fc488b5a8d
SHA512

779005189574b2f792a3dec0fac7af2394639f92f5f99b116064392ceb31c0a3ee7db39d212adf3db2f1021557b2bb165354b4f88287320b262776797ec4a904
SSDEEP

192:ejT+ah9IXP8IPZu3PsfSSRrfHWroGeqOazWUGdWI:e6XP8C20qShWsRqOyWUGdW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e32c6ed590909d7fcbe40981d394a28_JaffaCakes118

Files

3e32c6ed590909d7fcbe40981d394a28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Tanay Gosavi\my documents\visual studio 2010\Projects\svchost\svchost\obj\x86\Release\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ