fa8aee6ae6345f6f061471c3d85dc164_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa8aee6ae6345f6f061471c3d85dc164_JaffaCakes118
Size

29KB
MD5

fa8aee6ae6345f6f061471c3d85dc164
SHA1

9a8ec1537f35446bf6fd58cfde2742466b0e7779
SHA256

75aaf7d7fbab41e9e4198f595f86167c43106987794d3c3cdef79e3198011f08
SHA512

61f0bb37cae2e6a69c380830808f9ff6afa422753bd5ddb5b295f34c06b7f549f1ef31a9622d4aa72ce5409fd36d2b00f49655a6051de86020bcfb725e4ddad4
SSDEEP

384:VokB7NPeRpihD+QgL1hghc+S0vP96uly5VDjWwPqwTZ5fXLf45B6pQfu18gOeqpw:/PDhD+QgLki+Scy51Ww1j7uKqYzYcCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa8aee6ae6345f6f061471c3d85dc164_JaffaCakes118

Files

fa8aee6ae6345f6f061471c3d85dc164_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\sunari\sunari\obj\Release\sunari.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ