e11a64069d48603b91c4e52245218319_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e11a64069d48603b91c4e52245218319_JaffaCakes118
Size

100KB
MD5

e11a64069d48603b91c4e52245218319
SHA1

0da00c095476936a9ff6d99f4b4698eeae733752
SHA256

f71c6c349654c4a43401defc221f18d624ea2f54501a8d2c92f6c873d865b2c5
SHA512

8327ee08f555b5d1dcc365828eb75bd39750ee1c22877b1ac9607b3672ca93255c28f32e6e5c34eede6c20f98d351c5d43b6d599200606fe8e89d282e3fc19c0
SSDEEP

3072:a3Zh5h0aI94wU7E6IEihOX8iBkn4KEzz/xs3/XkpnXt:julXie8iBY4xavU9Xt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e11a64069d48603b91c4e52245218319_JaffaCakes118

Files

e11a64069d48603b91c4e52245218319_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\New Folder\RedLions\clean\clean\obj\Release\3Idiots.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ