560fee19a96c290f72439197552b25cd_JaffaCakes118 | Triage

Sharing

General

Target

560fee19a96c290f72439197552b25cd_JaffaCakes118
Size

140KB
MD5

560fee19a96c290f72439197552b25cd
SHA1

cddfa219f83e5290026c66063abd04004169153c
SHA256

9fbead1e01a3c543ef991de4bcf956eaf465d2ba234cfd9621cb684a9776411f
SHA512

c51ba11bf7b0af61d7db2541d2d6561f83697277ecac9ad8f495de32a970c86bf7589a839477b2a7d21ea2ad1468350d45abac37542e9a6d7f8fed7b84387b08
SSDEEP

1536:rfk71a4L5yGGaR2jxfRV3I8QzJZjqpmA6:jGa+2aR2lJVY8QzJg2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
560fee19a96c290f72439197552b25cd_JaffaCakes118

Files

560fee19a96c290f72439197552b25cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\GANGSTA\Documents\Visual Studio 2010\Projects\HelferDieb\HelferDieb\obj\x86\Release\Bong.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ