JaffaCakes118_a0794597b8669e46158f61f765d4be73 | Triage

Sharing

General

Target

JaffaCakes118_a0794597b8669e46158f61f765d4be73
Size

1.1MB
MD5

a0794597b8669e46158f61f765d4be73
SHA1

3d170cdba22576b75e672317ef46711c44a2bfd6
SHA256

fea5e0b53d49c7447019fe720bcd7019be94cf918c687021634ca12212d6f5f0
SHA512

a11c72ce4913d532fecdd47da776c13c301d4201a69ceed1ff280f982f21224fe32a21e6106ba4db04e76698df2abc48fb3181c30e1f71f2701953f8f194ce98
SSDEEP

24576:9JTV+zRlx0lQDe/QfgO/sqeAI8giImjRAPoYD6Q:rTgRtfEqeAA5m2gz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a0794597b8669e46158f61f765d4be73

Files

JaffaCakes118_a0794597b8669e46158f61f765d4be73
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2010\Projects\i'm_your_god\i'm_your_god\obj\x86\Release\i'm_your_god.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ