2c8de0d547ebe9c3f02f254a697880e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c8de0d547ebe9c3f02f254a697880e5_JaffaCakes118
Size

998KB
MD5

2c8de0d547ebe9c3f02f254a697880e5
SHA1

015fa6e70ba199e39aeed288ad77db3d2332f50f
SHA256

5cb1bc244ee209385faf3782faf7e248cb25b91c678ae9f47ea3bcd99fb0b1c9
SHA512

e30f22714172f4ac4efc8c2b47bc1bfe48e39d07be41734f7ceca90a11a1d3efff941a19637458334d9c27b7b25291c2ea4de9786045376ab8e82a67a08e5816
SSDEEP

24576:il43GOKMbFQjCcjxgFPUB0TFQtfR/6lHFIr6HoFCl:Au1cW2QF7IM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c8de0d547ebe9c3f02f254a697880e5_JaffaCakes118

Files

2c8de0d547ebe9c3f02f254a697880e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\FreeTicket\TheThingYouWant\obj\Release\SameLife.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ