f9a06b81e01097f5c0ce9ea745c91efb_JaffaCakes118 | Triage

Sharing

General

Target

f9a06b81e01097f5c0ce9ea745c91efb_JaffaCakes118
Size

80KB
MD5

f9a06b81e01097f5c0ce9ea745c91efb
SHA1

934bd4ba00bfb6e431d71bde31da15ba2843d7e9
SHA256

541aa9a74c553df49a4717508384e9a1616411fb82344057330572abe437bb45
SHA512

43e6520f0880a0dd94240cdd6286579a207545318e37ad49f606e2578579948a087e2307e91dce33d68f4ed6bd322101b59e2a2893fe370df252a9274d3d4a4b
SSDEEP

1536:DLTxP37aWyn1bANq4AomkvCTDqf6P2rQc5x14cLuuYTucdWXen:n9P37axn1e7AfmuDqf6P2rQc5x14cLun

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9a06b81e01097f5c0ce9ea745c91efb_JaffaCakes118

Files

f9a06b81e01097f5c0ce9ea745c91efb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jordan\documents\visual studio 2010\Projects\ParadoxRAT Client\ParadoxRAT Client\obj\x86\Release\ParadoxRAT Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ