2735d9e035b4f9754269fafdd66f2079_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2735d9e035b4f9754269fafdd66f2079_JaffaCakes118
Size

34KB
MD5

2735d9e035b4f9754269fafdd66f2079
SHA1

facbbb1f51e4219cc2bb1608ba4ec843e87bd5bd
SHA256

5f5c58a80d029d81850945fb7fa6e1adad4dde5e136729cb06cced43ee2ccfb9
SHA512

54f84f5bc10c6d7295dae016e19f9f155b23fdd2a2f84131416b36a0ab119ce966d880ef9d21a22007c4473f8f4ede53f0fd2ecbbe045378007ca699df850822
SSDEEP

768:FQp3oyBrimOGJlN8a8HFFJGk0F5u/O+BKJ93:cJrZJz8a8/AkA5DJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2735d9e035b4f9754269fafdd66f2079_JaffaCakes118

Files

2735d9e035b4f9754269fafdd66f2079_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\40\OpenAccess\CI-Release\Sources\Source\Product\NewEnhancer\obj\Release\enhancer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ