c533522b0a31b26cdb5bb50d56132a7f_JaffaCakes118 | Triage

Sharing

General

Target

c533522b0a31b26cdb5bb50d56132a7f_JaffaCakes118
Size

112KB
MD5

c533522b0a31b26cdb5bb50d56132a7f
SHA1

0d102f1f22cd983e4dc5b8777597dce3317b3978
SHA256

49f73aa13f20638d207525a34e8e9601ff2daa71951df2aebea72f6bdd97da54
SHA512

d89796c2f1f5f6dc0a86b11641ce15fbb87aa3ecf5366636c405dc9a48fc42b87f3a396a23b7633db3fd34f5fdce1ca05a0b2360c6ef8052348dea5bd0e944a8
SSDEEP

1536:I9/Z390i2sNlJKqLGQQ6U5PVKhsIMd+VLopqjtivtKcg0eVsDgAf83ZrYU:Ixz01sNbyQQ6aPWJ3LopqjgFKrR3r/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c533522b0a31b26cdb5bb50d56132a7f_JaffaCakes118

Files

c533522b0a31b26cdb5bb50d56132a7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Lenovo\Documents\Visual Studio 2012\Projects\WindowsApplication2\WindowsApplication2\obj\Debug\WindowsApplication2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ