01f87de9dd5d4e687f727cff5f54e8d9_JaffaCakes118 | Triage

Sharing

General

Target

01f87de9dd5d4e687f727cff5f54e8d9_JaffaCakes118
Size

32KB
MD5

01f87de9dd5d4e687f727cff5f54e8d9
SHA1

4b431447fc87c5fdbbcb9808a283fd03cd325261
SHA256

a07d511743981f1d7ce28cfbc264f2dede2187ffd558777d7bc5322fe53b4dda
SHA512

83011251e86fd7039c96d13f80a122d8a9c46aafc428d19f6f20c9fbee7f4e3ba6d1ffbd93781452078937d83b28718ef8cd77ac6a491d4cfa40c78ec595c4c5
SSDEEP

768:HzoRVgljBi7AKJmH2RX9r7bZZlzb+z9s3i6EMzYcHe+mj:HK/8KCyNPbZZlzbkm3i6Ep+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01f87de9dd5d4e687f727cff5f54e8d9_JaffaCakes118

Files

01f87de9dd5d4e687f727cff5f54e8d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\VB.NET PrOjEcT\Server\Server\obj\x86\Debug\Server.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ