f60cdd39985e39771667e60cb46fcc89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f60cdd39985e39771667e60cb46fcc89_JaffaCakes118
Size

101KB
MD5

f60cdd39985e39771667e60cb46fcc89
SHA1

fce551c30975c43caaadd6a34d4bc2fca04238ef
SHA256

8841340235c999a730f7bc3f51e11c1f82669e607aed8e12e5de94c79f0c9a90
SHA512

ec45632f1eb3345863e04b66d992614ce63e6865fadf2e4388c75e2bced488d5bc15a915e5844ec0ee2251cb77e3f88572afd3db552cb71b5a0006e7c2756891
SSDEEP

1536:W5XODpuhCJH4xEh1V87Go1wjbIWxL/QuI9iuyOkaPkT+1vkO:W5XODpuhwHcM87ms1cKvkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f60cdd39985e39771667e60cb46fcc89_JaffaCakes118

Files

f60cdd39985e39771667e60cb46fcc89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Cyb3rDev1L\Desktop\tDev1lServer\tDev1lServer\obj\Release\tDev1lServer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ