15479c045ee86c811d2063db0e6ca944_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15479c045ee86c811d2063db0e6ca944_JaffaCakes118
Size

20KB
MD5

15479c045ee86c811d2063db0e6ca944
SHA1

97aa16521ff27111bbc7d2550fd54b5d802811b6
SHA256

394fa4ecebc4421621ad6b9a8b9c8ef211cfe3fc83599ffce617e070ae8bf3b9
SHA512

0b350f2ddff6054aac9bfc02f36b9a7cf29afc62a1bc320ac0571477d9cbe3ae23f2b5195f2e8c4c626235c3d114b028a38b24c838af02aeb0f7950e04fec6d5
SSDEEP

384:J/7otMvF96uQTa7Cjsai/p3WFSx4FCDYzUUZBEbxr7uuTa7c:o+7CjswFs41Cxr7uu+7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15479c045ee86c811d2063db0e6ca944_JaffaCakes118

Files

15479c045ee86c811d2063db0e6ca944_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\MyWorkspace\EmbeddedPrjs\em_framework\application\lpc17xx\PC Software\DeveloperTools\LPC17xx UartBaud\obj\Release\LPC17xx UartBaud.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ