1a3b08ca3ab1ed95fd5e619434ff99e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a3b08ca3ab1ed95fd5e619434ff99e1_JaffaCakes118
Size

465KB
MD5

1a3b08ca3ab1ed95fd5e619434ff99e1
SHA1

138df9ffe5fb22dbc695173f673f3edd566c70be
SHA256

7767ffdb4f91b79e35fce434a91b14b59bcaeeb051e0e908d8bbfcfb36adee9a
SHA512

c352f774191328057e29b5fa017c1bff5f18ce3cfaf628324f6da459b0e950f9bd4622335d05408ea0754979dfeb8121b510f73cc0b5c239177ca064f6b8a178
SSDEEP

6144:dLTYJrIQ+CBtbNG/sFXAUDwqqXdy5dvX96f2Z9p76fVq4N59U6fVJk:IrIQ+tUF6uZ376bD+68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a3b08ca3ab1ed95fd5e619434ff99e1_JaffaCakes118

Files

1a3b08ca3ab1ed95fd5e619434ff99e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\AgatA\Desktop\Flexible_configuration_of_Windows_10\Flexible_configuration_of_Windows_10\obj\Release\Flexible_configuration_of_Windows_10.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ