456dca233fdcb0f63b14a71c7ae0fc3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

456dca233fdcb0f63b14a71c7ae0fc3c_JaffaCakes118
Size

36KB
MD5

456dca233fdcb0f63b14a71c7ae0fc3c
SHA1

6580caf56aea34989ed9efc7195362448ff9a5f8
SHA256

b65f28dd4bfa7abb246dd21858b8bf1f76d882db5467509edfb2016ce62e350b
SHA512

08322035f2c3d7829877dbcd699e0aa891a5c8d96e9cfb5964f4a61fea55ca33b2b5f38deacdb1f4ea86949b0f11bef65ea2ea12265736eb024da1c2b8b28624
SSDEEP

384:NbR1+IzdSueWRV7IySm/cpG/i7lLt0r6QLf4505FK9+hQfrH4T8r6cCIVPZ4j:NbL+IzdSueWRV7iOcD5C6UA4Y6JQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
456dca233fdcb0f63b14a71c7ae0fc3c_JaffaCakes118

Files

456dca233fdcb0f63b14a71c7ae0fc3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\MCE\Documents\Visual Studio 2005\Projects\VistaMediaCenterDecoderUtility\VistaMediaCenterDecoderUtility\obj\Release\VistaMediaCenterDecoderUtility.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ