d2c6c8c5ce5e8e9e1424126df0cafb9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2c6c8c5ce5e8e9e1424126df0cafb9d_JaffaCakes118
Size

204KB
MD5

d2c6c8c5ce5e8e9e1424126df0cafb9d
SHA1

c106ee5617c35d8f4d478fa48b9cbaf09744a666
SHA256

f9a99fa8263daeb4025c78cfbecc6787fd875f3e459be85587e907dff58c5a40
SHA512

0ee3eea3cf99684c251a2d5cf72037ef453387c7da0a73f60223a0099cc109af541c7f33637b2ae8667f0a6be84da89182b20cfd40e8ab558bcb0bb0ddf9fbea
SSDEEP

6144:8Nyt6dw/5EYtUD+D87ee51M/zhBO56dn1:6OmD+Dygzy5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2c6c8c5ce5e8e9e1424126df0cafb9d_JaffaCakes118

Files

d2c6c8c5ce5e8e9e1424126df0cafb9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\jonata\Desktop\Anjetor 1.0\Anjetor 1.0\obj\Debug\Anjetor 1.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ