4de9d39a6886e8df58aa7ed75ef7b172_JaffaCakes118 | Triage

Sharing

General

Target

4de9d39a6886e8df58aa7ed75ef7b172_JaffaCakes118
Size

976KB
MD5

4de9d39a6886e8df58aa7ed75ef7b172
SHA1

003ffe7fef69fb9c983277d8b24e7e5bc3fab88f
SHA256

40247033894b328d3cab272dc1aee2d763d84312e3a3edb72166c0fee1c32d6a
SHA512

f9e29986ed39684a46a4baa11f0aca5a775dc7c5cf3115d28d1dfd209a2dad997dd820a41bbcc8215f191cb7a9940d7b792810b908894e74e54db73a33ff76af
SSDEEP

12288:aPpI/RFAWeQDS4HiwSDV/ieFEmXu4dde+1j+Xgk4wplt1um6mUIoaj/5Uq:aPkAmDOwUVbA4dd5jog++m6mtt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4de9d39a6886e8df58aa7ed75ef7b172_JaffaCakes118

Files

4de9d39a6886e8df58aa7ed75ef7b172_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\source\repos\ConsoleApp\obj\Release\ConsoleApp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 974KB - Virtual size: 973KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ