8319922ff49798b0c5015ba34bb02dd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8319922ff49798b0c5015ba34bb02dd3_JaffaCakes118
Size

383KB
MD5

8319922ff49798b0c5015ba34bb02dd3
SHA1

1a6a263a0e45d686b246cfb6e2599788d08a66ef
SHA256

b217d3cb0e8974b7c9a97190f241e15b3bb1a56bb4f57e9eea344020b1be143e
SHA512

4f0629f16016b4354e4679aee483dce1abbe8c6eddb536f7dbe0fb6cf14a4c16b9e291284ac1eb061bc484947b5c26c9201c5ac0bc17a4ff86dfd97f5f0052f9
SSDEEP

6144:8crcQVtUZ4WXtjwozstALRoOW19v3M3s8tA1DWmIbmbDS44xHtIa48ah9n0fDp:1hVtQ4ClsVXv8SnIbm6btpqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EndCut.exe

Files

8319922ff49798b0c5015ba34bb02dd3_JaffaCakes118
.zip
EndCut.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Efham\Desktop\EndCut0000\obj\x86\Debug\EndCut.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ