af987595f2a7fc1afa53d1386a139c40_JaffaCakes118 | Triage

Sharing

General

Target

af987595f2a7fc1afa53d1386a139c40_JaffaCakes118
Size

161KB
MD5

af987595f2a7fc1afa53d1386a139c40
SHA1

2b07c992547a8829f8827b027f0c8fda3525215a
SHA256

90c0769b064b5efdb3e4455ed1a2b86b52b94843fc532dcef4e7ed637616d8f6
SHA512

32fd775ae0fa052c032ea01652ef4e7c3d331e0c7967b516c8804584134964b7074948c0602be3e4079214e1269da149ffccc4237ff59b0178b241d0579d1912
SSDEEP

3072:v2xkoSunSBwj9QzHLN2MVkjlM/bs6OWva0loAmJGqPKCptZ8UtobDO0kG:OKdunXe125joHOWS0AJGsKNoobDO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af987595f2a7fc1afa53d1386a139c40_JaffaCakes118

Files

af987595f2a7fc1afa53d1386a139c40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\work on it final\cambridge\cambridge\cambridge\obj\Release\cambridge.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ