d07bc28b34e119ae4a22aa24527354ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d07bc28b34e119ae4a22aa24527354ec_JaffaCakes118
Size

20KB
MD5

d07bc28b34e119ae4a22aa24527354ec
SHA1

7c0f73a945d9914235d991a53a00655315d468e6
SHA256

2d07304894ab74b17c48e3e5e61896f3ad30a244c916750e9371bcfa520ff2b9
SHA512

7ffd533206edfaa6010e7d19243030fa5707a5a05801ed853eb975c340698b0b94de442226d87b7dac007048dca426d2e9407b47232f6a353de5f661966abb4e
SSDEEP

192:aZ9PFArG7IPkHgagKtJNPJ+mUWgaL1TOw:EZC2FgbMLPMmUBcX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d07bc28b34e119ae4a22aa24527354ec_JaffaCakes118

Files

d07bc28b34e119ae4a22aa24527354ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\172.23.197.5\student\ambi\ado\today\notification1\notification\obj\Debug\notification.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nrsrc
Size: 359B - Virtual size: 359B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE