ec86c23493171e796537914cd9fe9076_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec86c23493171e796537914cd9fe9076_JaffaCakes118
Size

83KB
MD5

ec86c23493171e796537914cd9fe9076
SHA1

65e1c27c07653cb8967af3a6088067f13c6b9b26
SHA256

70b4f8f55a81b117b46e49081d0f7f85b326b9fe8a2f13d6870d3f102b8e065d
SHA512

a783daa629f5ba1359806cab4f5b643c35cf3d56a9e0bcced8d20e24f5d9cb8a6b068a74d257482cd4cd91bdc88c0041b75f6ee30f43fc47295c78caa586bb18
SSDEEP

1536:PHVwy/aXw33eaFLxjD73N4ZlrZp46TbHGH7COhLXuX8itwx4eh3wS:G60exP794Q6TbHGu7sitwC83wS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec86c23493171e796537914cd9fe9076_JaffaCakes118

Files

ec86c23493171e796537914cd9fe9076_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Kenny\AppData\Local\Temp\Done.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ