6414cbfec50785fa12ec41cf95717727_JaffaCakes118 | Triage

Sharing

General

Target

6414cbfec50785fa12ec41cf95717727_JaffaCakes118
Size

294KB
MD5

6414cbfec50785fa12ec41cf95717727
SHA1

bdb9b7004ce5c69dfe37895b4e0f93e35c4eb38e
SHA256

84a6b3796444958854a74359641a16d7aa1860524f1aef41bc6d3e886329443c
SHA512

001f5b9778c65f278c257180760b1d21f3a24eb20cca5f5acf1f2e930a792f559c280840e8d03c2f1cb1f44f79013f72e2efd40e663bc76ce7aa8ad8a6f6c7aa
SSDEEP

6144:Nx3YhLX/dmjYJwfoRYBkaXSQ5STu7WZq+0brWNkPJbugaCLq:N1A726ajXd5Z6Y+qaoJbHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6414cbfec50785fa12ec41cf95717727_JaffaCakes118

Files

6414cbfec50785fa12ec41cf95717727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Adrian\Documents\Visual Studio 11\Projects\DataProtector\Project1\CS\obj\x86\Release\Project1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ