944d49a65e72d7b27072a9c871d32eb5_JaffaCakes118 | Triage

Sharing

General

Target

944d49a65e72d7b27072a9c871d32eb5_JaffaCakes118
Size

7KB
MD5

944d49a65e72d7b27072a9c871d32eb5
SHA1

354681c16f9997dc4b54dcef7e4929cf0f466d1a
SHA256

97b9181cc4945138abdabf76a26fabb2415e175dc54caa4e8975e0a5c0fecda6
SHA512

b7283e1f7f1435607a38fd0305d6dc1cd78fae6955e949c37538cf0b71aa0c4ef77da27f528d6ae9518a5632809b11f9454207d181d32b750700c8c264377fae
SSDEEP

96:nRPx97gxNvfbXVankQXvxxCGFk45r7ywqItr+aGofyubIZNM2yzNt:P9sN7Uk6piEgolIZ70

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
944d49a65e72d7b27072a9c871d32eb5_JaffaCakes118

Files

944d49a65e72d7b27072a9c871d32eb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\DEV\YARATEC\JointFiles\obj\x86\Debug\JointFiles.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ