1bf7037a0a05c051b3e6acd45ebde31c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bf7037a0a05c051b3e6acd45ebde31c_JaffaCakes118
Size

511KB
MD5

1bf7037a0a05c051b3e6acd45ebde31c
SHA1

703eeecda75d3246e6e3c6cabb7339e45a2dcfa4
SHA256

67d45e7c1e3ddacf4180e7141128ba28156625eb6a2a0a966b2cc0eda9ca5fbd
SHA512

3ab7cfce92483695bd2c365a94fe6bb7f911c28cc0f4568fd1c53641e210f9aa0fbf5fccd5cd96cc71a81e562e47a5dfa5187aa9fed5d5d39f983ddc961d0875
SSDEEP

6144:fVKqa0uEhT1L4Gd+ZlxHsdP0F08/vJUWFWV1AhGrPCnvYn/w:fVKqa0urGt0TIVWhGzCnw/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bf7037a0a05c051b3e6acd45ebde31c_JaffaCakes118

Files

1bf7037a0a05c051b3e6acd45ebde31c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Client\Temp\BjjSHDRhGm\src\obj\Debug\NotifyEventCallba.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ