aa2c6d34ee960852f36ac98553cdc82b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2c6d34ee960852f36ac98553cdc82b_JaffaCakes118
Size

83KB
MD5

aa2c6d34ee960852f36ac98553cdc82b
SHA1

ab0aa7ab6e7b8f5a8d3b6c5fa87efc3512369acd
SHA256

5e4383074624a8efa07354dd325caf292aaa44076268f6f2d2a3fa1d66b44114
SHA512

46dbcb4b94e981b328d041c24a4fbf1bf473eac14ce4060d09e6dd09b2f67cd3396f0d458612e2f4dea167e923c9418a818fbdfb14d716df9b42a9304e6bad29
SSDEEP

1536:kCe8xeutjnmMQ2EKUWyCe8xeutIg4PFIXfG8zmf/QCe8xeut:xjnmmzIBPFIXe8a31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2c6d34ee960852f36ac98553cdc82b_JaffaCakes118

Files

aa2c6d34ee960852f36ac98553cdc82b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Joan Gonzalvez\Documents\Cryptology\Cryptology\obj\x86\Debug\Allopass Gen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ