1816f6de7583d12dc54f7d16542b2c19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1816f6de7583d12dc54f7d16542b2c19_JaffaCakes118
Size

4KB
MD5

1816f6de7583d12dc54f7d16542b2c19
SHA1

d9c706df76e9ff3e4d1bdfb2ba2c6cdc669c9d8b
SHA256

135aaef491a4b1f9316d217f84a05d99e1d721f56d627963f7d754c215f04e90
SHA512

6a26f490218fd5b44a291ad2475fc2217310a55a8456472a4eca0a3851d27b4854b655314f1eea4bf30967442824f7087f1ac07eb820dedf9b2ad6ffe67f9c30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1816f6de7583d12dc54f7d16542b2c19_JaffaCakes118

Files

1816f6de7583d12dc54f7d16542b2c19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\1023\Documents\SharpDevelop Projects\Demo\obj\Debug\Demo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ