b9f8b14f4024e02616b490a48b865399_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9f8b14f4024e02616b490a48b865399_JaffaCakes118
Size

1.2MB
MD5

b9f8b14f4024e02616b490a48b865399
SHA1

4dc74cbd59dd7bcd1a2c6d54fed5c61e93ac7cab
SHA256

ce145b8d49271334ca73ccfc2807af854cdd401cadd545907aeb4772920521a8
SHA512

2d6843ab6fc9c008d45a1ffe0f42a72c693bc5ab37d5af9e8fd4e1dabb24ac30d19b8af5f3b934b505877be52f7d2a5ca0b45c53959fb8e056755c209f79499f
SSDEEP

24576:vAso85VFADUzmpA2m/Z9I8bgMSvRFhhsFMvBNhZVee3:YGIxnZ7823ZVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9f8b14f4024e02616b490a48b865399_JaffaCakes118

Files

b9f8b14f4024e02616b490a48b865399_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Kevin\Desktop\crypt\Noob\Noob\obj\Debug\Noob.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ