f3cde62270061e1aff57764f109919e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3cde62270061e1aff57764f109919e2_JaffaCakes118
Size

7.3MB
MD5

f3cde62270061e1aff57764f109919e2
SHA1

0b7c72b168d9d527dd641e473430a8bce52d28a4
SHA256

eb110ed5ffa089db94c0d6e7ba56b73784c151682fe9b84e1f19536802b90581
SHA512

a1f6f40937a21ceaca4df32a6e171ec09c7c16f1553c838e8aeb802e4ed4b7f9bc75340ce3e6ff9a7f20d416857d122d374da32fa0beca0f7727e880333fa6f7
SSDEEP

196608:GoHFO+3MOGGOOOGOO+GhTNOeMOEeDlobhCUWxxu7JNXly:psh2xxu7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3cde62270061e1aff57764f109919e2_JaffaCakes118

Files

f3cde62270061e1aff57764f109919e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Source Code\POOJA\P3\P3\P3\obj\Debug\P3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ