ace25b4474a381b25fb569f322c58e25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace25b4474a381b25fb569f322c58e25_JaffaCakes118
Size

199KB
MD5

ace25b4474a381b25fb569f322c58e25
SHA1

28e0ce56f936fe4c9f0b4e6446e0ab277ddfc627
SHA256

cb5507f503f76cfe5365c370b209f4f81f906d8b83f6bc342b73997b8767f5db
SHA512

f7f13ac8bbdf0763cd2758324e1a9e3a34d0614de0a6bd87c24630d1fb18e70598808da8b418b5273ea6cbc1c624ad3af7146a5e4eeee8118395b9aed1a641a8
SSDEEP

6144:yD/dBtUmwR8A9ZFhZwbJzbWAvizMCNMg:C1twwJPWAKzMCa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace25b4474a381b25fb569f322c58e25_JaffaCakes118

Files

ace25b4474a381b25fb569f322c58e25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Desktop\SC\dependency\obj\Release\services.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ