3ecdd0058a811aaf35ff7dc0cd2d0456_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ecdd0058a811aaf35ff7dc0cd2d0456_JaffaCakes118
Size

24KB
MD5

3ecdd0058a811aaf35ff7dc0cd2d0456
SHA1

158f6cfc925a8b85f0bf03e1bf081bb0b0bfa597
SHA256

a359863f0c1716aaf2176666ea9aac055deed74a8f2fcf340332b0b3c02a3bd1
SHA512

a43369287c74f1c06331b23b563eb453670e3d2e6249b8d3a251b358ba9e22b9aaf234a875624e21d5d2a0906d49f061f733d7f2ef4e691313ef41e387e07a59
SSDEEP

384:knK2lLfQsqvG2MuQEQV0F3pU1jy/W151aZaLf45b4FcwdzRrVffzM08hyyuL5AaU:cKCLosqvG2MzEQqF3pqjy/W1r5ZdXQA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ecdd0058a811aaf35ff7dc0cd2d0456_JaffaCakes118

Files

3ecdd0058a811aaf35ff7dc0cd2d0456_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jamie\Documents\Visual Studio 2008\Projects\WindowsApplication15\WindowsApplication15\obj\Release\WindowsApplication15.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ