6033c1ef8a7bb35c604bba71042aa986_JaffaCakes118 | Triage

Sharing

General

Target

6033c1ef8a7bb35c604bba71042aa986_JaffaCakes118
Size

280KB
MD5

6033c1ef8a7bb35c604bba71042aa986
SHA1

6d6fa712557e18e229eb65ddfbb3fe0afc301059
SHA256

69a114df5525bb71f18484f15cb4dd44f7c416f26c41b8af17d2ce1b2774383e
SHA512

1b47885c938dc72035bc3baf4c2067661a89a2ebd151963f85284e36d078c9a6213165678d10b42c649a1da8af4cc271ce6f362fea0878d22dc47794e9a6aa78
SSDEEP

6144:U0Uhqdcs+EltgN/UbFOf3tfUilhoNgaKE/vANxTibWi8:HFdn+wmNcuCilh4glE/S0v8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6033c1ef8a7bb35c604bba71042aa986_JaffaCakes118

Files

6033c1ef8a7bb35c604bba71042aa986_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 11\Projects\Feon\Feon\bin\Release\BabelOut\Feon.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ