408dbc86ff50852d816a95e9dbc3bf10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

408dbc86ff50852d816a95e9dbc3bf10_JaffaCakes118
Size

24KB
MD5

408dbc86ff50852d816a95e9dbc3bf10
SHA1

9e0e863d9d8c633ba44cf020c650bbb035875b74
SHA256

b1e94ee8c761d121f607805932e0890fc6fead40bcc33597febba39d978e10e3
SHA512

9806383e89eace07bd2fcdb167abb70d53ff721358a38387160e4baead4ddd66f4bcb1a306ca1f6eb5faf21a650cb9e7d882158b75c48f3f6f68c6a5a4f672d7
SSDEEP

384:t6u8+sn/OQfZUcOxa5rOenOYpCkfFEGQa0bkrFs8a2fYV/kb+5asIP:5YzOxI9j0bKsZVZas8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
408dbc86ff50852d816a95e9dbc3bf10_JaffaCakes118

Files

408dbc86ff50852d816a95e9dbc3bf10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\DRIPS\Desktop\examples\net_framework\obj\Debug\Atomnite Spoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ