a247c1caee8ed5a1ac1031b5f94f21dd_JaffaCakes118 | Triage

Sharing

General

Target

a247c1caee8ed5a1ac1031b5f94f21dd_JaffaCakes118
Size

142KB
MD5

a247c1caee8ed5a1ac1031b5f94f21dd
SHA1

6de728b815da0db6cf41db140c3eca4a75f389c7
SHA256

5dd7a6eea8d0bbe4624bf6c57821015eae68108bd711aee9a179487f6a4a352c
SHA512

94edb34ba7e2ddb71c2f6bad406f9ec48e4faf14632b1a996ea9090050754ebeea680954d07ffd88162bf292eff7a29beceff6665b1a5fc6764ab524bb3173aa
SSDEEP

3072:mE7hM0uOxg/0fMaC1suxIE7hM0uOxg/0HM:n7hM2xg/0Uaa7hM2xg/0s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a247c1caee8ed5a1ac1031b5f94f21dd_JaffaCakes118

Files

a247c1caee8ed5a1ac1031b5f94f21dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\projects\downloader\src\Downloader\Downloader\obj\x86\Release\downloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ