2ecf43345e9346db9f07682fab598a96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ecf43345e9346db9f07682fab598a96_JaffaCakes118
Size

28KB
MD5

2ecf43345e9346db9f07682fab598a96
SHA1

9614e8132c3e2e0b831921f15faacf2e6e198aab
SHA256

b98e586a5431904e1a50ab13c86d1ca467b11b0ea81d8cacc58ca99096c70c10
SHA512

863acef30aeff39425a4615b2c81069c040a9192527852d0049ff91edce65aea6f0a1f3bdde783157f4de7c7f6233c630dd80082c313b026cdbeb6816549cf94
SSDEEP

768:MtnN+0QK75qCMrf4gKKKu6qHd012XPuxOZ8Kl:MtdQK8r4gKKK8E2fjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ecf43345e9346db9f07682fab598a96_JaffaCakes118

Files

2ecf43345e9346db9f07682fab598a96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ben\Documents\Visual Studio 2010\Projects\HSK\HSK\obj\x86\Debug\HSK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ