8d087c1bd01b5abe21fdbaa3ccd47fb5_JaffaCakes118 | Triage

Sharing

General

Target

8d087c1bd01b5abe21fdbaa3ccd47fb5_JaffaCakes118
Size

205KB
MD5

8d087c1bd01b5abe21fdbaa3ccd47fb5
SHA1

8b1ce8ea035d0c831561e6ee3d59dbca27cf35ec
SHA256

740c2f18b582ea1fcb0b92e67797f26ff2153ca6bba7059bf622af49406fec20
SHA512

72f795f49156dc529a214c94da343b8ea5c8df207fa5a137108636ef9eb051be16e1e24eb5c186af1a7a42230b50ba30205806b9434eb0bbb897f9a1b76150c6
SSDEEP

3072:hlSHsZ4T48Bxyvc9rfHhbfwMHDho85R/grs3+5ozbyUUHCYD2tkP9a+pkEtkP:3hbvc9VfwMHD55x3u5oCUUHCA2OhpkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8d087c1bd01b5abe21fdbaa3ccd47fb5_JaffaCakes118

Files

8d087c1bd01b5abe21fdbaa3ccd47fb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\baby\documents\visual studio 2010\Projects\system5\system5\obj\x86\Release\system5.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ