c858afe21cc56e52bed1250dba0f25c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c858afe21cc56e52bed1250dba0f25c6_JaffaCakes118
Size

444KB
MD5

c858afe21cc56e52bed1250dba0f25c6
SHA1

2eaeef598a0016646e6240f25265a5fc4df1cc73
SHA256

517c96cae0b9d19f3da4ac8f566e3ca64298044859bc47c7b7e0706a405b95f8
SHA512

539219ce63311d319dda860af67f4a1f868fcb37a0d30944f0e927eb3cfb7249520285a9d52f276b6b0184d4195b5622032bb714b934901a96175bc38a56a6a6
SSDEEP

6144:fmwqA/1ps5Fqzz/4tRjlkcpdN9rVSbubQRdT+rR85gMzR+:OwXKXN8cvNB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c858afe21cc56e52bed1250dba0f25c6_JaffaCakes118

Files

c858afe21cc56e52bed1250dba0f25c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\TARKOFF\AppData\Local\Temporary Projects\g_LoaderRL\obj\x86\Debug\g_LoaderRL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ