f1b018beb1bd57e4b44e937bc28ca14c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1b018beb1bd57e4b44e937bc28ca14c_JaffaCakes118
Size

103KB
MD5

f1b018beb1bd57e4b44e937bc28ca14c
SHA1

edcf332a01e4437df9c846c31c6f21460871b37d
SHA256

e3e66b513bd3c2bae800ee440b72e9b779edcc450fa468886f886848a4b33d9b
SHA512

bf533d945abdac5dad2920e8b5e164a275a45e112646101af1560a227a083645fea47a3de68a27b14b2f8421c67b3e0ba01a216077290d61ee08060738988409
SSDEEP

1536:qX77vt5TXhh932FX5qkbGlP6jm99GRtVnylewn9QazU4s9i91:qX77vt5zh2FX5B8vEJQewn9Qa791

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1b018beb1bd57e4b44e937bc28ca14c_JaffaCakes118

Files

f1b018beb1bd57e4b44e937bc28ca14c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Tool Bo2 Freeze PS3!\Tool Bo2 Freeze PS3!\obj\Debug\Tool Bo2 Freeze PS3!.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ