5b2569b9c083a7d718532354f1b5c1ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b2569b9c083a7d718532354f1b5c1ee_JaffaCakes118
Size

65KB
MD5

5b2569b9c083a7d718532354f1b5c1ee
SHA1

13b17c83571556afcb96dba9cfdff2f087b365b7
SHA256

82e45f7aa51c8b45d91253bcb9103d772974218845bb1f7159f02db14947842d
SHA512

79b56f493b51967419f0f6d81f67990d5c87747de4544878a463e79f8a1bdbfbd6056a2290bc2229a2ee15c62739e1a10088f00bc205a86f5494bc8a5d40452b
SSDEEP

1536:WNhXKN2TxoQbh6LAHw2mIZQQDlQui8EXLd5oyIxYZMn:WNZKkhQsy8E55oyIxYCn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2569b9c083a7d718532354f1b5c1ee_JaffaCakes118

Files

5b2569b9c083a7d718532354f1b5c1ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Development\HerdLogicNG\HerdLogicNG\TechWest.HL.Win\obj\x86\Debug\TechWest.HL.Win.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ