c165f1b167ec52888dc466c5a0d4ba97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c165f1b167ec52888dc466c5a0d4ba97_JaffaCakes118
Size

6KB
MD5

c165f1b167ec52888dc466c5a0d4ba97
SHA1

325c45dad76739dbac4d676308a69a2a7c19f2cb
SHA256

128c87db8dbe9c8c257403074825a90a3d4abc8c5138569f61bbc3cc408bfa90
SHA512

86fbae5c9859c9b6b7b064fd5db2de892b427f4b800dc12c6f0fd5bb69ead3f08f90b6d7a80a10a1d8c41a952f91a38cf114453d5b7291097a0b73e1e75f5965
SSDEEP

48:6aEEmEBz6Ibe4yGLZ/CWDCGOuJlltoDahXc4oFCsl28N/CrsIQCpQtP/uOulZgGJ:Qb2zf/L1toWa49sl28oob2Qt48GKzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c165f1b167ec52888dc466c5a0d4ba97_JaffaCakes118

Files

c165f1b167ec52888dc466c5a0d4ba97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\user\Documents\Visual Studio 2013\Projects\jada\jada\obj\Debug\jada.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ