070ab6aa63e658ff8a56ea05426a71b4_JaffaCakes118 | Triage

Sharing

General

Target

070ab6aa63e658ff8a56ea05426a71b4_JaffaCakes118
Size

11KB
MD5

070ab6aa63e658ff8a56ea05426a71b4
SHA1

8e5029121123c46bd673119e9dfe93f40d6f3b32
SHA256

be6cbe01f409d3299c20e87dd6bc0ede12a7cb2b9abfb20241f46df210a57241
SHA512

6dd465b8ee46c8302883165d33e4285c8f2f6746e5374d0b10904ae229bd48bc44f2f4367e24d1dafd3c46975cfba747aa9a9d42b9b6fee5e64abf4e8b4cdbb4
SSDEEP

192:1ZBo16o+urdJTz/Yjp5/XiBdTRhYcqOktsD1sW8AscOz:1ZB3fQup5/yBdTfYcq02

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
070ab6aa63e658ff8a56ea05426a71b4_JaffaCakes118

Files

070ab6aa63e658ff8a56ea05426a71b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ram_m\OneDrive\Documentos\Visual Studio 2012\Projects\installer\installer\obj\Release\installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ