06f3da0adf8a18679d51c6adaa100bd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f3da0adf8a18679d51c6adaa100bd4_JaffaCakes118
Size

11KB
MD5

06f3da0adf8a18679d51c6adaa100bd4
SHA1

8182d4eb88e9958039438c72e9b872d21e8af1d8
SHA256

66d1130a801e0f698d38af5e597c3607415fd33902ab8516984b4e398e4f7baf
SHA512

28443d772a6dc7064d63d698e8ddd5954b19b1018e9254b650501b3c79d77647335555a027cb3def479638a00fe4998798d0e8f87b6167f8deb88b5ef700c7ca
SSDEEP

192:IZmLN1X+urdJTz/Yjp5/RiBdTRhYcqOktsD1sW8AscOz:EmLWQup5/IBdTfYcq02

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f3da0adf8a18679d51c6adaa100bd4_JaffaCakes118

Files

06f3da0adf8a18679d51c6adaa100bd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ram_m\OneDrive\Documentos\Visual Studio 2012\Projects\installer\installer\obj\Release\installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ