ac59931e21fba404d79bec2d041f45b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac59931e21fba404d79bec2d041f45b0_JaffaCakes118
Size

24KB
MD5

ac59931e21fba404d79bec2d041f45b0
SHA1

af9a91951ec89f53f856be8209cfa8282b56e949
SHA256

8949c517bd92c12499cd9a27273ea696a14b1869c644da27715682b3f85e6e26
SHA512

64cbf18a7728c02cb13c721114630b99151f2d9014ef0b44d8fdef2a249a4e57c2792b8c5794412017944c14b45891fc4c81589918953496628e4c343c67dcc6
SSDEEP

384:SqggasBypTPmX3IFFV0FPsCzYcCepfKzghzJHnjAneC9YKfn6nXN5RGWxUCzYcCe:SqggascpLqIF3IP5zYcCezR3C9jwN5/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac59931e21fba404d79bec2d041f45b0_JaffaCakes118

Files

ac59931e21fba404d79bec2d041f45b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\flu\New folder\Panelbot\obj\Debug\WindowsUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ