2644ad085af976d30abd87cf2a9dffe0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2644ad085af976d30abd87cf2a9dffe0_JaffaCakes118
Size

383KB
MD5

2644ad085af976d30abd87cf2a9dffe0
SHA1

6239b0443ffc2dea8b998f41269f19c48a02d7c8
SHA256

a84baa487d4a633514548a29cdbdaa28158b4b6ac450da5e0f2ef65bd0331a8d
SHA512

e4b641e6b9edaab0ec76ad5ddcbfaf2615a4003c82e8ecdeb021a8c9fcdd14e85e83fbd853f753284cf41b05b870fe8d762d21b6fa918ec392b09a36f020d565
SSDEEP

1536:aGPCP1yXdARuRn6VINuG3qCobtjQwTp0jrtNqesJkkKcl:NPHNkuFVjobkjpNP0krY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2644ad085af976d30abd87cf2a9dffe0_JaffaCakes118

Files

2644ad085af976d30abd87cf2a9dffe0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wizzlabs\source\repos\SaveJuin\Nuigi\obj\Release\MillKick.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ