c09271e9d32e09826c560082f6edf942_JaffaCakes118 | Triage

Sharing

General

Target

c09271e9d32e09826c560082f6edf942_JaffaCakes118
Size

290KB
MD5

c09271e9d32e09826c560082f6edf942
SHA1

9d506bb5bb7e6f4ef02ef13578088895f8c1ce06
SHA256

4f1dd36c231466f9ee68d497e771aaace2666a0efd33ca9cd8bcd0f46990d15a
SHA512

c344e6299d298c9bf3302e6622ac96cd7da92f1b37fd0af56dd56da8260ec47e493103630cddbf230025e0ac5ed80755332f155b32f0469abd79e18e16c5286b
SSDEEP

6144:6ydhvrFdlUqLhvrFdlUqhCt6uXQpFWhlhvrFFlUq:jdhv/PLhv/P4XSFWXhvTP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c09271e9d32e09826c560082f6edf942_JaffaCakes118

Files

c09271e9d32e09826c560082f6edf942_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Work\budget.net\budget.net\obj\x86\Release\budget.NET.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ