63b67b2710ac895ae8b2625dfe5259a6_JaffaCakes118 | Triage

Sharing

General

Target

63b67b2710ac895ae8b2625dfe5259a6_JaffaCakes118
Size

15KB
MD5

63b67b2710ac895ae8b2625dfe5259a6
SHA1

61a7906684c449d46a188224c661cf833c55b92e
SHA256

91b0fb94469ee44450233c3be219308c6ccba55df2070ea112c7a566045bab63
SHA512

0d8220ed47d0615df3cf1909ef7c3727a64805a077fc8fd42ca475aa7f477a64dbd47d0807188132f5849b13efbf1cb136cef2fc42b24dc7c0a32c88657b56b9
SSDEEP

192:UALiy28wWVENE/dkZcKZZmQLKnloYU45uJcIhfjUv8177kCThO:U4r+O/MV7Lf45nQfj4817YCTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63b67b2710ac895ae8b2625dfe5259a6_JaffaCakes118

Files

63b67b2710ac895ae8b2625dfe5259a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\backup\Projects\autodler[stub]\autodler[stub]\obj\x86\Release\autodler[stub].pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ