f9e0db0afe20e08fcf88fc59bd20c7f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9e0db0afe20e08fcf88fc59bd20c7f3_JaffaCakes118
Size

1.6MB
MD5

f9e0db0afe20e08fcf88fc59bd20c7f3
SHA1

9aa9d16d01e2a7251b635fb9404b0625ae316c2b
SHA256

bdd30090ba8506808a019373499788906d478d1ea37a463f0ec62a07a8d64d01
SHA512

43764fcb712842157401008def2a96d3b52f7afb557011f0031ba85ab52c8c9d9419df0e82952c8cd59d6d21659c1701969f7c4b0ca0758941c65cd2b0eae6aa
SSDEEP

24576:XNDIX3jaKihpbRu95BoUncjrrRm+8VfBeJDhPYxF/ru4S4nCjpBzlyVa20q:yXzalhpItncVm9pebItu40j5yck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9e0db0afe20e08fcf88fc59bd20c7f3_JaffaCakes118

Files

f9e0db0afe20e08fcf88fc59bd20c7f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Project\USB\USB\USB2_33_V3.4- Rg test\USB2\obj\Debug\igfxTary.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ