0a909bd1ef323838067f68ef5a3a2657_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a909bd1ef323838067f68ef5a3a2657_JaffaCakes118
Size

44KB
MD5

0a909bd1ef323838067f68ef5a3a2657
SHA1

0329aa5a23b37ee7266bb88ab7fc2d20bf1ea8ed
SHA256

ee52b701626884184891594606319d7d0b642046ef9952b3a9565da7c4154c04
SHA512

ccd6f54d62ed1b8c24aa917dca9f5e87d9c2adad7fd0d46bea83e423fa9a04e7b33302e2a82f93705a1edb78c3fcc36f88934f5478d56c0d3f8194317c8f7886
SSDEEP

768:AxFKTKFXiG/xKyh3iTT3Lu6ZGl+2lMPeDWG9:AxF8Gds/uLlt28r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a909bd1ef323838067f68ef5a3a2657_JaffaCakes118

Files

0a909bd1ef323838067f68ef5a3a2657_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\IPSpoofer\IPSpoofer\trunk\dotNet2\WindowsCryptographyService\obj\x86\Debug\WindowsCryptographyService.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ