59cbe5e53a646b5b348fd642c3e892da_JaffaCakes118 | Triage

Sharing

General

Target

59cbe5e53a646b5b348fd642c3e892da_JaffaCakes118
Size

1000KB
MD5

59cbe5e53a646b5b348fd642c3e892da
SHA1

a025b99d7c6e0eafe29cd52d97927226f9f98f88
SHA256

137e72e83b4cd50bb880378eb1cd5bfd2e6a6b1c42da9dbb49595a23b5f7a56d
SHA512

f802fd774d79a0888f4c98ec24cc2da055bc60b2b6a396506bb593ffab5c387e29fab7c48ff4c8d3a7e79670154bf08b0c85c84e7c4aff75dcb7b6addba99f03
SSDEEP

12288:dbCi0F6iKOFpzx1Bw1regn1cBMBN0B/DXH2qqewGOqzDAMOnYyniZYUzK:dei0OOFpzx3UBgD3hqe/OqzsnvGD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59cbe5e53a646b5b348fd642c3e892da_JaffaCakes118

Files

59cbe5e53a646b5b348fd642c3e892da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\JodPc\Desktop\NC_2017-07-27_306_Thu01\obj\Debug\NanoCoreFUD_01.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 823KB - Virtual size: 822KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ