JaffaCakes118_79818dfcc89bc05c035a7733b132a151 | Triage

Sharing

General

Target

JaffaCakes118_79818dfcc89bc05c035a7733b132a151
Size

827KB
MD5

79818dfcc89bc05c035a7733b132a151
SHA1

0c929416597cee0bda7826f1d118e183f19b13e8
SHA256

4e5ca634aa01e8d36a453e351c0c15a9336454dc8ab9c2131d2fa70a2568de30
SHA512

b3ac16ff92eec0d0d478587c23a5086234fb025eea7ad167ab42ca705bb56e780a5d8359dfeed5ea0314fd25f853c7355e104d1db160f139b1e9e7a4272a1b78
SSDEEP

12288:StLt4absMaoEM4eKHsSlZdcHAf4aQ0icP+S2XDhCR6i/lCmf7T:o4abRTEpzQaIc2SEh5iomf7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_79818dfcc89bc05c035a7733b132a151

Files

JaffaCakes118_79818dfcc89bc05c035a7733b132a151
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Chris\Desktop\Windows 7 Icons\mydirtygallery.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 461KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ