d1581d18ddb078978fce77494c40ebb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1581d18ddb078978fce77494c40ebb8_JaffaCakes118
Size

142KB
MD5

d1581d18ddb078978fce77494c40ebb8
SHA1

39e492e43ef54656eba070219700c443df6c6cfe
SHA256

1ba18916ce39755188240193eb381a9f59379095dd258fd3a4724af47a5dec84
SHA512

f44037f98d6200023288664a9e25db440ce27589b8cd05095e6a579b0099b4b8bfef968d761cb09403e6936124ff41340869b05a31650858346a2a6d209f13d8
SSDEEP

1536:T+T8KOiah6wTDI8MhM2H6QmPZMEZ/M3jfk3XWlovZZeDTZ52gYjpcvB2F7W9:yT8KOiyXaM2H6QmSEZ/mgxfQQWIFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1581d18ddb078978fce77494c40ebb8_JaffaCakes118

Files

d1581d18ddb078978fce77494c40ebb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\Projects\Applications\Personal\HttpProxy\Source\obj\x86\Debug\HttpProxy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ