64ea753747bd00bf1701b4dc29de86e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64ea753747bd00bf1701b4dc29de86e9_JaffaCakes118
Size

185KB
MD5

64ea753747bd00bf1701b4dc29de86e9
SHA1

af68f702257b8fde3047715280dc3ce734d09bdd
SHA256

dbf8954fae88dac84a830ee66ddd146c94bdd0fd7cc11ff9ed6e0058691ac8b0
SHA512

7f4d4d242d3a650a081c9e74f74969617130381714157d84158b849e2aec3f43e4f19115eb0e44d9214cfd37f3ca61d41487221ca592b3e11d03a0a641bb99be
SSDEEP

3072:yaoatbvMHAJP5bilDPHMwAAZu779ca8o03qHWe9s7CmByk4u5v5c1smXzV:yajVkH8P1iJvMlqulT8oWqHVsxBykAxX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ea753747bd00bf1701b4dc29de86e9_JaffaCakes118

Files

64ea753747bd00bf1701b4dc29de86e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\abo.aus\documents\visual studio 2015\Projects\Silverlight\Silverlight\obj\Debug\Silverlight.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ