f8f9878ebe2a7ba6eb3c7683aefb5866_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8f9878ebe2a7ba6eb3c7683aefb5866_JaffaCakes118
Size

2.9MB
MD5

f8f9878ebe2a7ba6eb3c7683aefb5866
SHA1

25a7d952a58f765271c34ae80aac85c14cca2973
SHA256

ae93cd05be4958f8b0b453d1f14818987e55b33b5138f79189acb4240dfba023
SHA512

f8bd5e1dc1625cae67b3a9c88dfd715c8806c77685c659af4aa1664a442d9503e75398651332d54f10d35d8e599058f3c85d3b5a5cabb4e8c2703079df78c02d
SSDEEP

49152:GZZONpKK/aGU8T0uTOqElzrppAZZONpKK/aGU8T0uTOqElzrpp:GcKKiA0uyLZrUcKKiA0uyLZr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8f9878ebe2a7ba6eb3c7683aefb5866_JaffaCakes118

Files

f8f9878ebe2a7ba6eb3c7683aefb5866_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Solo\Desktop\West V6.5\West V6.5\obj\Debug\West V6.5.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ