e9fe6bab7b5de8eab8463eca6fe241ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9fe6bab7b5de8eab8463eca6fe241ee_JaffaCakes118
Size

9KB
MD5

e9fe6bab7b5de8eab8463eca6fe241ee
SHA1

336b5c94ae3231909363e4f6ebe27e1f223b37a8
SHA256

7e0992254e41b2a3d7e91ce5663176996189bdea6683015ce7d204586421b141
SHA512

2f3ac25692d9e0bdd79566de734d8f6b5e40f0aea3d9116163e3b6c8d1d82e33363872d0ae18247b6567297c7aa15e9ba9bd9159b1b0892f2e6fdbb0a2bd6db4
SSDEEP

192:2x+q3TwEyIADxdyGwDfHSTjyooJppSQsDaM/OyK:2dTwiYDyGUJoobpSQzURK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9fe6bab7b5de8eab8463eca6fe241ee_JaffaCakes118

Files

e9fe6bab7b5de8eab8463eca6fe241ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\ProC#\Collections\CollectionSamples\QueueSample\obj\Debug\QueueSample.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ