9453866dc9e10226668e7e42e9266c3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9453866dc9e10226668e7e42e9266c3d_JaffaCakes118
Size

150KB
MD5

9453866dc9e10226668e7e42e9266c3d
SHA1

8a0b2f158f8815ee6db019ea0be793a00b4d1124
SHA256

4458232e85617e2cad19adca2e9f65e1b4eb890733f81d05924fc92c6fc4d341
SHA512

de40aafa0dd2b5553ed4b17bf42958c9681abf4cb13ac8f8e51590dd419670adafd162ca86df8af391ca783ea69caea4786861f05a61b8cc43478ce9a99aaea5
SSDEEP

3072:+rm2Hn/NYaUDpO/eOIy1ogqFu/M+a6T74eFkx95jsY8O5KlDm:+rfnlYX6Iy1Pt/M+aOBFM9qOQU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9453866dc9e10226668e7e42e9266c3d_JaffaCakes118

Files

9453866dc9e10226668e7e42e9266c3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\iMyth\Documents\Visual Studio 2013\Projects\SeafkoAgent\SeafkoAgent\obj\x86\Release\SeafkoAgent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ