468733bdd62a3819dfdb964133ea3532_JaffaCakes118 | Triage

Sharing

General

Target

468733bdd62a3819dfdb964133ea3532_JaffaCakes118
Size

130KB
MD5

468733bdd62a3819dfdb964133ea3532
SHA1

d9373bc3fe2631919edda7eef14830efa31b740f
SHA256

97bc9f3c1fa22249d19a6c7999dbaacff5c38b030dd15ecec890487061dd85d9
SHA512

9cdb18545a127cd4d6194a913b93d0ecd53f8befca640d05ed8729c7fb19ea41bc37a1c2e20e4166c5d06aa1a29bf4b9034678499b34a95d30b702ab8d646fb6
SSDEEP

3072:EZdGZVUUE+nI7zKMQrMivVwWldHEXIOQCfeuKI:EZdGZmUrvDYXIOQzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
468733bdd62a3819dfdb964133ea3532_JaffaCakes118

Files

468733bdd62a3819dfdb964133ea3532_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\labuser\Desktop\OASIS_Die_Qual\QUAL_TEST\obj\x86\Debug\QUAL_TEST.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ