8d24a7a976391f9df2c6b692c009ef37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d24a7a976391f9df2c6b692c009ef37_JaffaCakes118
Size

1.2MB
MD5

8d24a7a976391f9df2c6b692c009ef37
SHA1

e207109fd47585b5d38ba8ddd96fb49903823a88
SHA256

d89abdcce04240216979d87af871fdf83327df1117655b4c8e8ee140e5e796e3
SHA512

b8250ddf6795d2df15cbb58c0ece10b057dfd0dd847472d646a898698d7e9f94faecaf32d82ff0b3de1dddc2836397953b7619e030c81eef798c59fcc9c55fdb
SSDEEP

24576:BbCrhf2SO6omIC13GWK5m0c4RWj0KmSFe6In4uBCqGC8:Bb0hOS2bCFSwgRWj0s2oqy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d24a7a976391f9df2c6b692c009ef37_JaffaCakes118

Files

8d24a7a976391f9df2c6b692c009ef37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\My Projects\Public Stuff\WindowsApplication4\WindowsApplication4\obj\Debug\WindowsApplication4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ