313f35e9b9ac1343b6b3673d54ad8d1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

313f35e9b9ac1343b6b3673d54ad8d1d_JaffaCakes118
Size

22KB
MD5

313f35e9b9ac1343b6b3673d54ad8d1d
SHA1

54336af7c4047c64735be0a52dde44c439773abc
SHA256

7ae089c48f924d1e79c6021168e40b389e621023fe8e3b33b8e05acfed32c6de
SHA512

76b85a030385aa4ad8059c6bac1b91c58283355aa8547ae56c7758c2aea24f9c9c76615c5b761495a6f05c341a892472964dae9f6be54ffca83d8a54703c3e13
SSDEEP

384:w9BjW9KhoER5JgqtqZcKobIWZyJLk24jXPlrk3XE+T5TpOdQtXsXF:99G76uQzeA2XPUXsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
313f35e9b9ac1343b6b3673d54ad8d1d_JaffaCakes118

Files

313f35e9b9ac1343b6b3673d54ad8d1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ