e14e949eb350b728ac31f0bedfc0e2b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e14e949eb350b728ac31f0bedfc0e2b6_JaffaCakes118
Size

71KB
MD5

e14e949eb350b728ac31f0bedfc0e2b6
SHA1

f115421fd7be55f768e4941783639d4f06ac8b75
SHA256

dc310e1b10746ed7e2d7cf77dffe56131b1197b54748cf67c5d7d73296ba0b0b
SHA512

ce3786202b75643eb56708bdb34115cc59c503831f9fe55c4c7648bacdb596873db475c9ae281de580074a54dec125b02f96b4c205840a0289a514ebf88e2d6c
SSDEEP

1536:N4LeBLuEbtJGHPGF2R2OY1ZxvQ7TsiCHGurQ2OHYZnoOzuNwfKJM0atsnGpHvDEu:3JGHPGF22oUBC2O4ZnoOzuNwfKJM0atx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e14e949eb350b728ac31f0bedfc0e2b6_JaffaCakes118

Files

e14e949eb350b728ac31f0bedfc0e2b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dr-West\Desktop\•ÖS£ÖÖå¤å×ÜÅååÇƒåå£ÜÆ¬S®®Ö¬¬ƒ®\•ÖS£ÖÖå¤å×ÜÅååÇƒåå£ÜÆ¬S®®Ö¬¬ƒ®\obj\Debug\•ÖS£ÖÖå¤å×ÜÅååÇƒåå£ÜÆ¬S®®Ö¬¬ƒ®.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ