3fe657b8ae2409984cc06f9305c65a4e_JaffaCakes118 | Triage

Sharing

General

Target

3fe657b8ae2409984cc06f9305c65a4e_JaffaCakes118
Size

17KB
MD5

3fe657b8ae2409984cc06f9305c65a4e
SHA1

9cd7b49b1204287996e6ff6ab98e1bd2dbf564ab
SHA256

2cc8c12af388c414589af2a8cc0ac05eb402337b8c5fb44a31bdfadbb4e9cee7
SHA512

dd7eaf1679a3624ee62ad8283910955779fed9368a5799a32b86394f3947162bb297a38470165892ba7ee26268bb6f699206134a3d8ab43f34f25beb29d2214f
SSDEEP

384:Sa/cGz++vkR8Mos8MBdaBLrDG4ZIB/HIU8SqOFz5wW:xz++MRlos8ka1rIRFuW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fe657b8ae2409984cc06f9305c65a4e_JaffaCakes118

Files

3fe657b8ae2409984cc06f9305c65a4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Documents and Settings\Pentium\Desktop\Loader-VB_by_ATM_\Proyecto1.NET1\obj\Debug\Proyecto1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ