439ba84a964a17ce2c3d51ac49c68f81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

439ba84a964a17ce2c3d51ac49c68f81_JaffaCakes118
Size

49KB
MD5

439ba84a964a17ce2c3d51ac49c68f81
SHA1

97bb70b88fee210728ac0b1fee6d7414e1a9789a
SHA256

e9879c927b43e65f7a9cab8c8f7aee73bfa9dd29db5920df7cfd05ad3ac3581d
SHA512

3e033bc3c49eeaae0f25ffe4b03a1d4cd7584559862ad2b0f1034abfa025f1a4a244c8e5f2bbbfa522633aef11e70be167e7a078299eb726f47405e259e80a3a
SSDEEP

768:eHYEintfRFhkaqcDl/pkRKde6yrc82LS29Osj/CTGik2CzYcHeQi:eWtJHnhfyrcPLS29Os/bik2PQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439ba84a964a17ce2c3d51ac49c68f81_JaffaCakes118

Files

439ba84a964a17ce2c3d51ac49c68f81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\USER\Desktop\mi_project\client\client\obj\Debug\msoclient.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ