457eb7feae138775245d9f4dd507e179_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

457eb7feae138775245d9f4dd507e179_JaffaCakes118
Size

15KB
MD5

457eb7feae138775245d9f4dd507e179
SHA1

b029abfc67a7e39262062918a93e719cb06a70ab
SHA256

a1c83754ed0482c684a25422b1addd107d3b8572acc5b346f08d343980155219
SHA512

a9f33c6846462e9d649831951c9bb7869e8094c5dd87c50dadb5b0fb736019c50f54370c7b5e88159dd85cb381f6417400390c1baac5f8ebf3ae14e77fc568e4
SSDEEP

384:sx/58OXrcEVUxGqaFcwaQ+LRn6NF3dd1:l3lxGbcBe3dd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
457eb7feae138775245d9f4dd507e179_JaffaCakes118

Files

457eb7feae138775245d9f4dd507e179_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\labuser\Desktop\rajesh_temp\ConsoleApplication1\ConsoleApplication1\obj\x86\Debug\ConsoleApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ