405cacd2e01aa2630b36a2566d36bb67_JaffaCakes118 | Triage

Sharing

General

Target

405cacd2e01aa2630b36a2566d36bb67_JaffaCakes118
Size

3.6MB
MD5

405cacd2e01aa2630b36a2566d36bb67
SHA1

e42272044591bd7cd54221275702bb95aaf74dca
SHA256

55d3d6ed09fa05730edb9372a13567fbc0675eb4815e10cd08478d66bc5b8964
SHA512

515b040525d544051beb05528221259cfc91cb1923acc51f68c5461cd11ebfb2f736a70465d95b891e126a1ec6ff32217a936166714b03517d978c91642ba293
SSDEEP

24576:rc3Ugs6OlCpGmReZ/dZf6cux+U9qYVgCxLWtVrbjJmv+:LLG+U9qYVgCxwL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
405cacd2e01aa2630b36a2566d36bb67_JaffaCakes118

Files

405cacd2e01aa2630b36a2566d36bb67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\## - ALL - SYNC - BACKUP\#04 Hacking\Trojans - Bots\#1 - Windows\#1 - Sources\#1 - Unrared\FUDING\Project2\obj\Release\Project2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ