ef7cd657cffe1bf5e31fc22986470076_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef7cd657cffe1bf5e31fc22986470076_JaffaCakes118
Size

444KB
MD5

ef7cd657cffe1bf5e31fc22986470076
SHA1

8ac62c5076c0b03b57e4521602ce200e38cda93f
SHA256

ad7a96e0574fe675f15fe01103b25e1aa34eea185c9546870dfec3562d52a2b0
SHA512

d5e216abcb73f3afeb4d02788b4a848463329809fc457b011c2f8f40dca13b64178d544caf441cf37e361b860770b1deac2c852bac829dde45b4d82dcec2bfd4
SSDEEP

6144:q1ZPb7Nu5+H5pd2lztDuFW2MIsjMZkmvH/qPViMinbP3I9PZngtNbQfEcPU+CFns:q199rSuFW2hMBMLM2r3iZngtNbkqOfAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef7cd657cffe1bf5e31fc22986470076_JaffaCakes118

Files

ef7cd657cffe1bf5e31fc22986470076_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Users\Bryan\Desktop\iKrypter\Service\Service\obj\x86\Release\Service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ