069f1720b1c64619796cbfa53c8007d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

069f1720b1c64619796cbfa53c8007d8_JaffaCakes118
Size

17KB
MD5

069f1720b1c64619796cbfa53c8007d8
SHA1

0d45e935d4fd2f31a901591ea8a949f731aa1362
SHA256

9735fb77468a48dbd82e2bf531b56d2f9dd26201a82eea933fe710ff7d1d9938
SHA512

0e490ebf56bf5c79249583deb40dc78eb383b2f013e0acd5330c2ea2e161e7a0f5871aa43a9127e004417af621353494c2bb6cfe0bf3a18d58204d29ed88c25f
SSDEEP

384:8ev+ffrfLYR0AJ2Y/6iLr45FQfrp8qbr6id:8eWHTLYRjj/6efp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
069f1720b1c64619796cbfa53c8007d8_JaffaCakes118

Files

069f1720b1c64619796cbfa53c8007d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\Nav\Nav\obj\Release\Nav.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ