ade2ab13c55c3261d46c32ec89a36eec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ade2ab13c55c3261d46c32ec89a36eec_JaffaCakes118
Size

835KB
MD5

ade2ab13c55c3261d46c32ec89a36eec
SHA1

8813a21f7c254bec21e9dbdd2c3fe13d357d005c
SHA256

4b0d1ec6aa4f4ed1fca7b154f318cd91796136da9867497f6745c6844b45cd7e
SHA512

731877c4b662ae9b4c3b32ddf9a1597e234d615999c350599b7f26960c94807fc46923ba906fe26f195f0609118180cf44500b2739017050000ab8798bde46f3
SSDEEP

6144:poVXkTGgfTPdK2tEnI+btx+j5V2F3ELxfTPdK2tEnIPbtx+jtVdkA:pUXkTGYKAEnI95A4vKAEnIEtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ade2ab13c55c3261d46c32ec89a36eec_JaffaCakes118

Files

ade2ab13c55c3261d46c32ec89a36eec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Shane\Documents\Visual Studio 2017\Projects\ccenhancer\CCEnhancer\obj\Release\CCEnhancer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 469KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ