1c3a4ec5ae35408d9e97b02b34b1800d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c3a4ec5ae35408d9e97b02b34b1800d_JaffaCakes118
Size

62KB
MD5

1c3a4ec5ae35408d9e97b02b34b1800d
SHA1

1085b37b59c436d0efcaffb8e06632f7d6578723
SHA256

aaea97c5972f37c97204ad166ff03edcd1f03fcdddf10d48efab733c8770027f
SHA512

ba763cf26f5ef6486956153d9152d8bdaf2a61a39def6e5a3679675fc53f7c64f9cc60c67c8491cc8a3fb75f6e8437f56541cfdbcb5ccd81b487c964a73234b9
SSDEEP

1536:d6dMbeP885Nzqz9zbUPpJZiR3Kt1NGE/LVVNFyBYHIT:MdMi55C9MPpfiR3KzNGIREBzT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c3a4ec5ae35408d9e97b02b34b1800d_JaffaCakes118

Files

1c3a4ec5ae35408d9e97b02b34b1800d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dokumente und Einstellungen\agma data\Lokale Einstellungen\Anwendungsdaten\Temporary Projects\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ