8a56c8e0607e42571fa4d05ad98df938_JaffaCakes118 | Triage

Sharing

General

Target

8a56c8e0607e42571fa4d05ad98df938_JaffaCakes118
Size

5.0MB
MD5

8a56c8e0607e42571fa4d05ad98df938
SHA1

3015e0be82dd81bbd627ae6cd53144ef8fd107fe
SHA256

a5ff376de98115e1236844d9a1c532603e77558eabc5074543f2ba3c4a23f49c
SHA512

29844b9e040bce9174980a57baa38b264070a0109c2e59f6b09473e0259fcd2d794a9dd041ee0f8b8d1ec97113794fb59e06c1e75f35ff402a46df8a37f6c700
SSDEEP

1536:9UCKXDAkf4NiFJ+l1yrFoCSjaP9ckAJAbZ:9UbXDAkf4NiFJ+WoCSOP9ckAJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a56c8e0607e42571fa4d05ad98df938_JaffaCakes118

Files

8a56c8e0607e42571fa4d05ad98df938_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Ice\Desktop\MyCrypterzzz\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ