ec1e228b8eed7acc3fdb1d952791fd92_JaffaCakes118 | Triage

Sharing

General

Target

ec1e228b8eed7acc3fdb1d952791fd92_JaffaCakes118
Size

328KB
MD5

ec1e228b8eed7acc3fdb1d952791fd92
SHA1

0fbf7199ca84134eb1010e64171f2fd1d62ebcb4
SHA256

db7f9609ac2ab80bafb75be0ced061d7c4fceebe67f7c84b440ebe084d511542
SHA512

012ecefef42ae67ac5cf85c019dbcb8712df4563a6b475bf8f9fdb8188ea4a15f2f99a409b161d20561f7864daf06a3635924d4d5ed32dca1cb85f978f6df5aa
SSDEEP

6144:KD1lXthD3hhHx1Lqhusqj0BAu8Ondtb7zukActNKX3qWskNtXfiAo/Z:aHfHLrhqAuJ9zV/KnTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec1e228b8eed7acc3fdb1d952791fd92_JaffaCakes118

Files

ec1e228b8eed7acc3fdb1d952791fd92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Desktop\SC\dependency\obj\Release\services.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ