a2446758f1f3a1a5fd3a4e371bc86a28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2446758f1f3a1a5fd3a4e371bc86a28_JaffaCakes118
Size

365KB
MD5

a2446758f1f3a1a5fd3a4e371bc86a28
SHA1

a7f55ed1b36ec03a953e6e08e0be12d0717720f3
SHA256

9322381568905712e753c2e59edad411ae99f6b9eb0e9501fd7154ce31e90347
SHA512

78108b35bc4aaf87e3c9e9a14cc2b3bdc1242e90548ff2049ad965d52b6d34837ea75b8ef7bb0c0ae6eebb47f3a0f8c1b1e12df93926cc58288fc0dbe82e9a06
SSDEEP

6144:4eh7zJE38YOUbPWvBnN8QmPyLY9ANneTOkCScOzpZlMBautMLDkv7CQ/JW9V:1zM8YTSnG/7dTBFcUiMLDkmQ/E9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2446758f1f3a1a5fd3a4e371bc86a28_JaffaCakes118

Files

a2446758f1f3a1a5fd3a4e371bc86a28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Callum\Desktop\New folder\Update\eppy\obj\x86\Release\eppy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ