ae58850705afbf01f30459e7c4756697_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae58850705afbf01f30459e7c4756697_JaffaCakes118
Size

102KB
MD5

ae58850705afbf01f30459e7c4756697
SHA1

8e0aa1c5b9afd6170d9af3615d11af4ec0c1b8ef
SHA256

1024158cf0b118ffb972ed22ff296eb01ed956fbcd7bff79cce07fb4722b7a20
SHA512

e90ffb6b1f5f3b154103a5b1eb606450be8f545784979e8961d4345a52a1de71a82a8dbf4a3db3ae6c411fc0252afb165fbdd73a1ebcb1a3897d2b913ae0e7d0
SSDEEP

1536:365XxZAhpw/TIMrQ5YIn8r0hW+af8pRJm36AEdpgJmQPJndN8MR8NQajsj:36xEhpw/T7U5frpw6AS6dMMEQae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae58850705afbf01f30459e7c4756697_JaffaCakes118

Files

ae58850705afbf01f30459e7c4756697_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\work on it final\cambridge\cambridge\cambridge\obj\Release\cambridge.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ