f9c495ebf0ac0708f7f7ea50b9f69a4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c495ebf0ac0708f7f7ea50b9f69a4d_JaffaCakes118
Size

10KB
MD5

f9c495ebf0ac0708f7f7ea50b9f69a4d
SHA1

06c50325676f36c15e4ea59eda4adf08e09b6e10
SHA256

f441ca829dc494316aae4c7a0fb1ca9499981762f4f7e5c4fff6825d0efbbd1e
SHA512

cacbc36980c932cb1b4da6b7722a31d7d97b5127c20b8f8b95c16b718218bb63417e0fa670260e94cb5f67d8205d37207eb7226090b1eba00c626c4a5b093a92
SSDEEP

96:LHl+trRza2WpKwpUaLk55U5oZLXt1Q19ozNt:LHl+PYpKwrL6250LXe9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c495ebf0ac0708f7f7ea50b9f69a4d_JaffaCakes118

Files

f9c495ebf0ac0708f7f7ea50b9f69a4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\davut\source\repos\ConsoleApp1\ConsoleApp1\obj\Debug\ConsoleApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ