eade4b1b81bbe130f60de0aa4932be6e_JaffaCakes118 | Triage

Sharing

General

Target

eade4b1b81bbe130f60de0aa4932be6e_JaffaCakes118
Size

43KB
MD5

eade4b1b81bbe130f60de0aa4932be6e
SHA1

70ff7e159df53043ad9204965b27539929679068
SHA256

740ee7f71f72705e2098e4171df52c5c822c457b13d9854f9d10657bc9f3622b
SHA512

2467ea1f6b2adc5d4ad5f3188048219876906defa358dff3e037035153df5ac32da6b4577a47174fd5cdfca8a03dec6e05dd16184b4674bb03beda77250c7a6c
SSDEEP

768:u9YUIDSC40/Ex2iLdzVL/bycmfEaSSHH13nNG1:u3C4cEHpVLXyEVSBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eade4b1b81bbe130f60de0aa4932be6e_JaffaCakes118

Files

eade4b1b81bbe130f60de0aa4932be6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\pc\Desktop\obfuscated\y1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ