3798fba9aaa7205b88a3f7c3f973d4ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3798fba9aaa7205b88a3f7c3f973d4ce_JaffaCakes118
Size

105KB
MD5

3798fba9aaa7205b88a3f7c3f973d4ce
SHA1

aa3a8cc7df8147fbd2859617d079c69f467f7db0
SHA256

e19ad7c5c89b4af0646a608982ce0b3b0a2dc68aea16d22539fd79ccef77758e
SHA512

7cdb001410c62850110df124f1bcaf75cae7f77c5b9ab1eb473092afe4e511615da842c69cc70007a1fa229ff778286bc9a8c7a339c2ce21fb6c6a4c0f82668d
SSDEEP

1536:7iqC8U3JKP67KjLnRgQ5ZlvK4OwRSnYSJDuzVva0kZXEUDmRvHLBSOrUG6S4X8JS:7itZ066GQNyeRcwlkZXE00r1ZwX8oX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3798fba9aaa7205b88a3f7c3f973d4ce_JaffaCakes118

Files

3798fba9aaa7205b88a3f7c3f973d4ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\HACKER\Desktop\Server\Server\obj\x86\Debug\Server.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ