0754df529eb00ae1f9111b3440775846_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0754df529eb00ae1f9111b3440775846_JaffaCakes118
Size

11KB
MD5

0754df529eb00ae1f9111b3440775846
SHA1

e19ffb9a04f0fe51b2cdc642f2647c06a5d1a053
SHA256

bc353aa3300e7474e1b14173f239d0ac5563bdf147ae69fc8c8f5aa9459df22f
SHA512

7e996554188d2425b882adc161bee0a1b5ac4d02fc2ea170d2c6167265c49be598672430a33a88e88d644e6e47dce357ffd7d6377c4aa05d2e5c0e9a05923bfd
SSDEEP

192:dEs7z3IRzRkAkeqIHoZ9agVgwKryVPJpznYY:yRzRkAk7iornOzMPJRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0754df529eb00ae1f9111b3440775846_JaffaCakes118

Files

0754df529eb00ae1f9111b3440775846_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\user\桌面\ym_csharp-2008udp\hicode\UDP打洞测试程序\server\server\obj\Debug\server.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ