466e8bd4f52475e6523d0b17f04aff05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

466e8bd4f52475e6523d0b17f04aff05_JaffaCakes118
Size

5KB
MD5

466e8bd4f52475e6523d0b17f04aff05
SHA1

ee6e689c4b4f1b38b3c5440b2a48c7a1413fbbd1
SHA256

777e5774ca3623bac99cd46741939a17e381cfabf37b8244cf1bcdb47b235527
SHA512

630b49b97b01422d6afcb2a57efda6a7c380c7d762240e05e12c3ff0f19816fecfea213eb95128f48e4712bf134b222a69703270116674647dc24d37101ad758
SSDEEP

96:t5NpIMaj7ueEh/DvcHxdRVSguEiPFn74CHwTzNt:ZpIMaWeEh/DvcHxdRV/uEi974CHw1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
466e8bd4f52475e6523d0b17f04aff05_JaffaCakes118

Files

466e8bd4f52475e6523d0b17f04aff05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\Desktop\Software Bootcamp\Artifacts\dotNet Stream\Csharp\Customer1\Customer1\obj\x86\Debug\Customer1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ