f5e491c604092ff21b547d12567fe1df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5e491c604092ff21b547d12567fe1df_JaffaCakes118
Size

251KB
MD5

f5e491c604092ff21b547d12567fe1df
SHA1

d5aa59f05ff5717689f4c0422e7cb4667ee3ebde
SHA256

d9268c3a54e764dd72922c98b17c76257d449c007442f5a485ea4bf3a3e0a7e7
SHA512

beba6ddadd7ac102903f2834eb7386e9fe5d73bebe998a09a19244ffac2aaddebb142bf841a04ff41f6b68b13978042d31ad2343846e15f5f54c652fbc7eaf6e
SSDEEP

3072:Y3b/II2X3VYoJD8oU3Sd0mdnQEXSCX6jnztJTXs8QO095mEXgUG3Td1YIktcrXda:TV9D8oU3a0mdnJbXUiXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5e491c604092ff21b547d12567fe1df_JaffaCakes118

Files

f5e491c604092ff21b547d12567fe1df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Kirill Linnik\Desktop\DwarInfoChecker\DwarInfoChecker\DwarInfoChecker\obj\Debug\DwarInfoChecker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ