d49c7f591e1b9295c0bf47ab568f6abc_JaffaCakes118 | Triage

Sharing

General

Target

d49c7f591e1b9295c0bf47ab568f6abc_JaffaCakes118
Size

36KB
MD5

d49c7f591e1b9295c0bf47ab568f6abc
SHA1

ae7de7835a703f77d65a0f4991a9608221f7506e
SHA256

769d836a14cca0c9bbea931a4fedcb7b171c5ef11df8e748da599fbcb2fb085c
SHA512

e56a70fbf53f97159aae707ed27d2dd6c7540eb35816a29292081886b95992a29e393a454a69b04cc3a5afc8acc054c7427a91a7b65a441d4c5b95a077cdadbf
SSDEEP

384:4iJ7exAyqdpwxgoQhqxgH80iljxKoArr8hAXwf2b6g0vsxgGNYkb7Fr+SaMGhxza:4lx6hM3LhAAfQ6tkpGRSAR/1Yb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d49c7f591e1b9295c0bf47ab568f6abc_JaffaCakes118

Files

d49c7f591e1b9295c0bf47ab568f6abc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Projects\LinkedDataTools.ApplicationSuite\LinkedDataTools.RDFStudio\obj\x86\Debug\LinkedDataTools.RDFStudio.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ