47aeb635aa89dea44c829f5a6420e724_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47aeb635aa89dea44c829f5a6420e724_JaffaCakes118
Size

18KB
MD5

47aeb635aa89dea44c829f5a6420e724
SHA1

3b7a378b130e2e8c758b1193c7fc2b9c26afdc36
SHA256

2ebd91adb2cbae4b26722774f589ae54eb2ef916af08e42701006cb18cf0cc74
SHA512

1cd760baca69f5c73b6c1a14c9ea15ec3d88fe34f7f9c6df0994636ba694647e3951ea3d2b86889cbc551ffe1054da660dfa6ccd6f03831f3f9dd6c3e892c94d
SSDEEP

384:IKS/LAnfGtvefowyFjKXGlf40dhfkEGv4D2AWW8R9L5RgSh9Y0:dSzguXwScGfd1lDh8R9N3Y0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47aeb635aa89dea44c829f5a6420e724_JaffaCakes118

Files

47aeb635aa89dea44c829f5a6420e724_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Develop\xLens\obj\x86\Debug\xLens.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ