220c6b207ae96c1b96f75dfba9e2c6cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

220c6b207ae96c1b96f75dfba9e2c6cc_JaffaCakes118
Size

10KB
MD5

220c6b207ae96c1b96f75dfba9e2c6cc
SHA1

203a8f4632728b9af9f7f4e3da6d52792e43df50
SHA256

a577c7a656bab4521a82da17f1630425a021785186ff018354311bbe69dc0f3c
SHA512

0a54874af8b04463729a2bc0ee68bde60f6b868cd08738b06857791240fccfd07979b4deb5764bf3f7edb3d5c2b7eb5f601250dc2aa0edc6131a66086cd24708
SSDEEP

192:3Zsaa45grpHYyjAXkbRTE9XyG3ziVgGZYFiBIDBQ:m45aHYyjAXkb0XyG3MgGZIV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
220c6b207ae96c1b96f75dfba9e2c6cc_JaffaCakes118

Files

220c6b207ae96c1b96f75dfba9e2c6cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Programming\3DOpenTKTest\3DOpenTKTest\obj\x86\Debug\3DOpenTKTest.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ