952601ea8aaf6a75efc143d7bbb29b99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

952601ea8aaf6a75efc143d7bbb29b99_JaffaCakes118
Size

11KB
MD5

952601ea8aaf6a75efc143d7bbb29b99
SHA1

4495d537cdcb8ac5ac9bc2d7fe6d2d6404467f46
SHA256

21b0ccca7eaf051da6e42fc8de46a246a4a5b8578513a3a65df89fdbc1ad3ec1
SHA512

81d576a40b38e5a1db10a0d1879821165e97d1abda8bb003179d78b3536f8b84b5ae1dbff4bfdbe348b24d1feac4770430436921924ed3f418b3901e281bc3b3
SSDEEP

192:7P2R7MCmQuMmgvu/MK29NX74I96tS++Gv95/VVYbgV22Y:wMBpZUp4iWS++GvxtV22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
952601ea8aaf6a75efc143d7bbb29b99_JaffaCakes118

Files

952601ea8aaf6a75efc143d7bbb29b99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Elven\Codes\WJFS.70\DSInst\obj\x86\Release\DSInst.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ