ee9239763fb41e9c54d85e791c1bca19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee9239763fb41e9c54d85e791c1bca19_JaffaCakes118
Size

132KB
MD5

ee9239763fb41e9c54d85e791c1bca19
SHA1

96aaee21f352613131b4ec828c5b23b17eb97026
SHA256

976f087e1043940275323d6ae65a1cb35eee979fd734d91a1fd7fb7f96fe29db
SHA512

456335b3f669571f04a4f8d62127ada5cd35076ac58e1d642fe77aec9146916d5688ea505d2a0192ad2fd7746122cd25db73e53ecf9b2d4ee8d26f731c225949
SSDEEP

1536:NmI55/seGsxrMNUaie7vpRREFoUC6oR8bZXmCLN006X6n+R8b:NmI55/SsUiZC892CLNt6Xcu8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee9239763fb41e9c54d85e791c1bca19_JaffaCakes118

Files

ee9239763fb41e9c54d85e791c1bca19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\LEAD15\Dist\Examples\DotNet\CS\CloudServerConfigDemo\obj\Release175\CSCloudServerConfigDemo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ