11083c288eb16ab639a912ab8bc81ed6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11083c288eb16ab639a912ab8bc81ed6_JaffaCakes118
Size

1.6MB
MD5

11083c288eb16ab639a912ab8bc81ed6
SHA1

b1ae1b6f206d2ca12fe55bf4844a806300f17312
SHA256

60ab74b4c726f17fb7d3cbabcda75c09e61c07a44bfda209d53be642591e51fd
SHA512

f08c8df79b36031a5ed752e51148d2e1fbb40c88a2c30b9a82cc4b746c89e69f0b1ca8bc0816173fcb9b7970fcb8baf1a9b8f1745a1058d39a0f346164e21c61
SSDEEP

12288:1yJWzpq24UZycKimV2AFe6opE6RpI1tPe1vlvN10xAwxtNGRQefszxJFO7bOB1of:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11083c288eb16ab639a912ab8bc81ed6_JaffaCakes118

Files

11083c288eb16ab639a912ab8bc81ed6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Dr-West\Desktop\ConsoleApp1\ConsoleApp1\obj\Debug\ConsoleApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ