e1967b26bad21f922319c58b6aa9c8b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1967b26bad21f922319c58b6aa9c8b7_JaffaCakes118
Size

372KB
MD5

e1967b26bad21f922319c58b6aa9c8b7
SHA1

5dba7044ed04c5e376c94cb4ed2ec8992a79fc52
SHA256

2c88bef8e4a2a21de79d7e839e8f18025396b85fc10c95f5a88462f7e7b2d455
SHA512

a7c685f50fc9ba5987228f980c42d4417956731adc74fbecac9fa3da15065f5635782f8506e4e538c15aef1fcb7eb53ab453c84bd2477fbfc1db15925c262e47
SSDEEP

192:c8cQFOXEvLeHV5esxHVLgLVLj1nifx0XaGRE:c/QAXEvLYesxHVLgLVLxifx0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1967b26bad21f922319c58b6aa9c8b7_JaffaCakes118

Files

e1967b26bad21f922319c58b6aa9c8b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Dome\Desktop\RatMitLowSize\WindowsFormsApplication1\WindowsFormsApplication1\obj\Debug\svchost32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ