2fa5592bf3755fed4208efc4d41691b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fa5592bf3755fed4208efc4d41691b8_JaffaCakes118
Size

25KB
MD5

2fa5592bf3755fed4208efc4d41691b8
SHA1

c29897795f0e25b389539eced77cbad3d8e6011e
SHA256

584024dce06a07987103e5819067dd8704fc19791e7c978c0c653c6056bef8dd
SHA512

c166e792771e447fc2a9f80f9dc56c44cabdb33c2e177dd6b7849410cb201da5c5337e20e7700c6c76fed044c9308b2483bc187e41d6292390bd5123ad694a50
SSDEEP

384:RncEBHgQyQ5Lf45aQfrJ8htiA+WeEwYx8p13+yGyPihaLfkG6:RncOHgQz98s8pBiv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa5592bf3755fed4208efc4d41691b8_JaffaCakes118

Files

2fa5592bf3755fed4208efc4d41691b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\HeatshocK\AppData\Local\Temporary Projects\hallo\obj\Release\hallo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE