1493dbc7163f7dca92aafb7379979da4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1493dbc7163f7dca92aafb7379979da4_JaffaCakes118
Size

85KB
MD5

1493dbc7163f7dca92aafb7379979da4
SHA1

60a85e9e6cde2842d382450f8e9a828384bb12a1
SHA256

cf7d1c780286f7256f9445d5929d75c6fade694b466c249f1333e353998ca5cc
SHA512

9da5fa80307feadb5a67ca686fff2bfe1483113bced335db5e626ee7391622a1a2cb245d6cf529929e5f67d152c0c946213795a83f469e8178d8aafb36ba4b4d
SSDEEP

1536:Z6WWifKCuMdiIZc0PXXdnC2196bNAoGDDBxg:VrShOBZXdz1IV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1493dbc7163f7dca92aafb7379979da4_JaffaCakes118

Files

1493dbc7163f7dca92aafb7379979da4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Workspace\Kingston\urDrive\1.0\UnInstaller\obj\x86\Release\unInstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE