2e19662aa4da2b3c061cbbd566a76e4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e19662aa4da2b3c061cbbd566a76e4c_JaffaCakes118
Size

149KB
MD5

2e19662aa4da2b3c061cbbd566a76e4c
SHA1

ac31162adbd1dfbb476e426db1109aef27ca90db
SHA256

d3b83993819f4fe07fe8f8e6863f307ba328daeae5960693de0b2f9a8c906b97
SHA512

58e6806e029993aa64eed36af78ed047edc213aa71439eaf37af347f37b4fd6864c955a697e98a8081e53386b700789df1d0722c4e4c933b2fca25775b852fb8
SSDEEP

3072:WFoIz8MksnZCXpUh6sZ07GplzxL+0u9ntsY8OvKppZ+S:nnMkMh+7o50l9uOippZB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e19662aa4da2b3c061cbbd566a76e4c_JaffaCakes118

Files

2e19662aa4da2b3c061cbbd566a76e4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\iMyth\Documents\Visual Studio 2013\Projects\SeafkoAgent\SeafkoAgent\obj\x86\Release\SeafkoAgent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ