855cd23473c296a68fe3592d350201d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

855cd23473c296a68fe3592d350201d3_JaffaCakes118
Size

101KB
MD5

855cd23473c296a68fe3592d350201d3
SHA1

e17be889d73eb5dd58584bbf50388759c21ed3ba
SHA256

96ad968adb5931c7be538980b32b933583ba7955db032fc6b084d29de4407a54
SHA512

e266f7cb59a6572bec374385bbb9a05904dca6e2c5a248e93e3dfc628ba2fd5f069670978a0c4f5ef3e954cc6f63477030e7e4f1da9617c2da82e411d1fc53d8
SSDEEP

1536:W5XODpuhCJH4xEh1V87Go1wjbIWxL/QuI9iuyOkaPkT+1vkT:W5XODpuhwHcM87ms1cKvkT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
855cd23473c296a68fe3592d350201d3_JaffaCakes118

Files

855cd23473c296a68fe3592d350201d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Cyb3rDev1L\Desktop\tDev1lServer\tDev1lServer\obj\Release\tDev1lServer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ