467b23cfa37c3c303f3ec7aba68eb2d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

467b23cfa37c3c303f3ec7aba68eb2d1_JaffaCakes118
Size

27KB
MD5

467b23cfa37c3c303f3ec7aba68eb2d1
SHA1

4fa416205633feec25b5cf8cacc6d5f72a6d14b6
SHA256

39e6327c7f0548ba4d68d11c5a40071e9202d273d9a6a2314be9ba2a7c310628
SHA512

a82293f4bab6b1b34f65fdda6f46f25e29b202e4fbe7e153de26ca5c7baf735e6c555d1f213c28c60671757562e9e58d680dd3659d5b59e7445de3d2cada038c
SSDEEP

384:jsWsRKIP/2UiyvpW+y4faLwlriXNGgr5jOKxEutJSjuqfu6sYchRn:4ZpPwyk6fmL5guujuNxYchRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
467b23cfa37c3c303f3ec7aba68eb2d1_JaffaCakes118

Files

467b23cfa37c3c303f3ec7aba68eb2d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Alienware.DESKTOP-MKL3QDN\Documents\Hacker\VIRUS\upnp\upnp\obj\Debug\upnp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ