8a9f3d8cba5432868487c8835d9531e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a9f3d8cba5432868487c8835d9531e5_JaffaCakes118
Size

9KB
MD5

8a9f3d8cba5432868487c8835d9531e5
SHA1

25ac172f354bd50892ddce5a392192503e1ebf60
SHA256

6affdb06e4c83bb84a819bc5a91deefd97ba12e0b0fe9d8d858bccef569569d6
SHA512

3f33c29566c4f815ef90d092aa5cda39bacdea3276e6944ab42445afe3be7948481b077430bbdb290d62e3bc25d3bd318724c208f28fa487418627a874fdf291
SSDEEP

192:WexuDiHnSylh/WI6if5evGLeQFR9dLz9t5emBciW9z:2A1h/WFixeOqQ79ddt5eSW9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a9f3d8cba5432868487c8835d9531e5_JaffaCakes118

Files

8a9f3d8cba5432868487c8835d9531e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\BCTOT\parole ps\source\source\obj\Release\authlog.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ