8f299c370b70c9ff76c398ca2d444105_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f299c370b70c9ff76c398ca2d444105_JaffaCakes118
Size

345KB
MD5

8f299c370b70c9ff76c398ca2d444105
SHA1

3ef5dfb4ca8d8a436cbbb9382194052037a4582e
SHA256

3e97f5f5a25a3ba1811e0007c54f20c31b3f99841a665edadc489cd139512460
SHA512

92eefe47401d1ad972d0c36f0681c0cd3439e788e9bb8a6b1ecd26f505e2f7bf5a5e80ea270eb8382feb085ac577674d58faaec91c4cd865d4dfd65edfe8a4de
SSDEEP

3072:ex+QMgSXupDSbLiAKWi63Q77NHhQjE3Ls8XLsEmSm/VGw8u0n1IM+CmNWqQ1CWw+:6TSeRSX0W9Q7JHsRam/Aw8uoxKfLkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f299c370b70c9ff76c398ca2d444105_JaffaCakes118

Files

8f299c370b70c9ff76c398ca2d444105_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dr.NasHmE\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ