9c088c70dedf2a426514a288d01c6bd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c088c70dedf2a426514a288d01c6bd8_JaffaCakes118
Size

31KB
MD5

9c088c70dedf2a426514a288d01c6bd8
SHA1

a090a154e1be311a8749cd8eb9ace3bcc0e76afe
SHA256

6d50d3fddd7abc858caff2cddd44db87f8eebc4d4b278c3f53d0ab4f8f6e2828
SHA512

be81d3fc811dca67255d9fb5247c8cea138dc1957d059ee9a161a45ff271632cd8ef7cc2d558b2dc0b67bf51e93667b7500c301d763aad22f08fc3dfa748c6e9
SSDEEP

768:ggK+WvugLPBz8BLJx1+Jm+6jVlTi1isXil5j6:g9+WvuGJCxU8VlT2rA52

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c088c70dedf2a426514a288d01c6bd8_JaffaCakes118

Files

9c088c70dedf2a426514a288d01c6bd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\fabio\Desktop\Loader Example\Loader Example by kyare\ChooseHook\obj\Debug\ChooseHook.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ