08eccefde1784073834e9f5285e3b002_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08eccefde1784073834e9f5285e3b002_JaffaCakes118
Size

1.9MB
MD5

08eccefde1784073834e9f5285e3b002
SHA1

216814986710705e443b0e51c4c6f9d2bf5d7df8
SHA256

ffb3340027f54d79ceae0114c49e51f4909a1111980e201daf7035c4f3b6b210
SHA512

a7c308efa895a91f363457a5a7d471f597e34032e99d963f80f5ee785350a4a64becaff13a1655258b3e5f1c721c7bb377605807e93a3979d941a9224df1e53f
SSDEEP

49152:DXwmIiy4fA0By9gPtJDyq0/IwjpHVGfy/rPX//2Pg7traGrMm:khiy4fAy+gP2jpHsa/rPXnzRr5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08eccefde1784073834e9f5285e3b002_JaffaCakes118

Files

08eccefde1784073834e9f5285e3b002_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\work on it final\cambridge\cambridge\cambridge\obj\Release\cambridge.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ