74c36c3153c9af93205d6b8b5992a71e_JaffaCakes118 | Triage

Sharing

General

Target

74c36c3153c9af93205d6b8b5992a71e_JaffaCakes118
Size

22KB
MD5

74c36c3153c9af93205d6b8b5992a71e
SHA1

7439119ef1c665355968039eb19c34f8a385ee80
SHA256

29367656819e603c9a8a6e62a0b81202bab378f6044ea7dbd950cb73065bc3df
SHA512

d20797fce363c1d7a70e395ed9d8edc79b5ec4fe8eee74070a837dbfaabaff46d0a3ba346a01c3b12fb7250781c22e63266d05a8315710183f3214067f3e22b1
SSDEEP

384:d8fjD7d2Lte4JLQY0ripLf45s1dtApQQf3kV8Kb44:dYjDZ/46Y0utl1dmp2x44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74c36c3153c9af93205d6b8b5992a71e_JaffaCakes118

Files

74c36c3153c9af93205d6b8b5992a71e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\XMLCreator\XmlCreator\XmlCreator\obj\Release\XmlCreator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ