8d3f44882ba2e5404e24c4545ebebe8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d3f44882ba2e5404e24c4545ebebe8d_JaffaCakes118
Size

24KB
MD5

8d3f44882ba2e5404e24c4545ebebe8d
SHA1

c0d432540986be86a6bb6136c843cad6f87641c6
SHA256

29d91a75a9e4113411e091e1e351fb7f9170ab6b219a5ff176424c033cedb30e
SHA512

43cbdddb13d2d4146bccc3d8c367b34e82ab73911c7f58392e77a1bdd6475662c20e9b966368e97006920be7bd308153fe30f359305b7aa2e39c92d875617972
SSDEEP

384:bnoziZ/J5svyBc0lX6zCd8P/oObbp/lJA8L724jcPluj1+dNOnfC5lWsx0NF:bofvyBQ7ombp/sQBcPILSleN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d3f44882ba2e5404e24c4545ebebe8d_JaffaCakes118

Files

8d3f44882ba2e5404e24c4545ebebe8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\fff\AppData\Local\Temporary Projects\In1\obj\Debug\In1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ