9906efc0731dd028dc93b0784a025eab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9906efc0731dd028dc93b0784a025eab_JaffaCakes118
Size

4.2MB
MD5

9906efc0731dd028dc93b0784a025eab
SHA1

40bd53488aaeea57378352702e815bcf1e6fe10e
SHA256

6159e74dde635edad3761a9500209c160f82be4b607b743bcea81cff4d0e4927
SHA512

b87aee6e406f001627f56bf7f91a6007c6b2898bb5270f2173e3cbe11d0a059ee63c3469427ef1d3baba9aef8ecdf1d28753460954ee4105382bc0f3a8500ea1
SSDEEP

98304:FyDt6K4MJVnjOobt/JN1LA5elHc+S4fRp5UvluK:FyDtK8bbxn+IHcBEV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9906efc0731dd028dc93b0784a025eab_JaffaCakes118

Files

9906efc0731dd028dc93b0784a025eab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\gamel\documents\visual studio 2015\Projects\ChilledWindowsWPF\ChilledWindows\obj\Release\ChilledWindows.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ