JaffaCakes118_cdd85b54f445caa1a55c0ae387f8c248 | Triage

Sharing

General

Target

JaffaCakes118_cdd85b54f445caa1a55c0ae387f8c248
Size

276KB
MD5

cdd85b54f445caa1a55c0ae387f8c248
SHA1

e4d10becbb051b5b8b19fde147b43bf66748ffaf
SHA256

622b1dc21a2b5fa17f57c1eb58efdc3b229c46e19e3a2889fd7e4647a3a62085
SHA512

4b07537568483c162636cc0865d1331c3a53bb93a60f48031392c89e350a0edfd02ee46d253f4066c11a4a4e260588246bda7d196fcf08736a36e23f13281564
SSDEEP

6144:vKCNeOOVKf1QvQoXTjsFQa9vuZAv1zitw4O:vTGk1QvQoXTIKa8AAO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Glitcher.exe

Files

JaffaCakes118_cdd85b54f445caa1a55c0ae387f8c248
.rar
Glitcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Familie\Documents\Visual Studio 11\Projects\NET.My New Project CSharp\NET.My New Project CSharp\obj\Release\NET.My New Project CSharp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
READ ME.txt