3888d3fb7b2e706d73b00d2fa41fef60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3888d3fb7b2e706d73b00d2fa41fef60_JaffaCakes118
Size

1024KB
MD5

3888d3fb7b2e706d73b00d2fa41fef60
SHA1

ff1ae795223f1ba477b1f024ebd9e297b4386312
SHA256

5bac666bc9c9f6cae94947c57eea1ad7777693c1380974e3e372365aeb9ab3e7
SHA512

1c148a147e359a01ce86acaf99d7729610816f70dfea5645ab6ee9a6904f949d2c4c068f79c43758ba30b892e9f63b840f2bcc7146842da19206b217674b439c
SSDEEP

6144:4gvurZRYXizNdqQpBaEXITuHOiBktip/19wZYF+:vK+0XBfbCipvIYF+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3888d3fb7b2e706d73b00d2fa41fef60_JaffaCakes118

Files

3888d3fb7b2e706d73b00d2fa41fef60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Kevin\Desktop\crypt\Noob\Noob\obj\Debug\Noob.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ