1001ac0ab6ee4828564ef7232de98ba6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1001ac0ab6ee4828564ef7232de98ba6_JaffaCakes118
Size

42KB
MD5

1001ac0ab6ee4828564ef7232de98ba6
SHA1

467684350623d0b3f3d99f6d978d32a433a31bdf
SHA256

9f0ad657060a9ffc507e4c6a1184a0cf9a71cd5471ae36163abc6ed38a9913f9
SHA512

6346538cdb25261f4b68bba77eb921e65416c69cfbf9dfde7026c20e23bdc0269e1c7329ce7f062883726c24650f3a64bf1db2aa38e086f9c69ac2f17a03d76a
SSDEEP

384:hOiU23+pKwZdD0a5AD7gFcb9vWdTvj8Ag2YSdQAT2Yie2Y8gggrmw7JFEcJp1OIF:MiXwjPmZOTQwjB7mJs/y8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1001ac0ab6ee4828564ef7232de98ba6_JaffaCakes118

Files

1001ac0ab6ee4828564ef7232de98ba6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Personal\Vista\Downloads\VS\Fools\obj\Debug\Fools.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ