fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118
Size

10KB
MD5

fc3077e55a76f35b9aadcea770a35ad4
SHA1

4b6a4be07dacf88192a4754cbd215cfb73e13234
SHA256

fcd5a1f2661b07da5281b24dee53ffe0e9a90530fd390662acbd89816551e16e
SHA512

acb6679c2c0d2c77e6222351a9dab568c0b6588dc359b9276d2e10d2641de2b37c8a8b70f809b3c55133e3945a6144791f56cfdc91b591b4ee17ce4f21adf78c
SSDEEP

96:GrYTWO9O6Y9UBmA9SFWhJY38ea12hw+egOaRi0+VUUb5Hv/mivzX7N1bV7qzNt:B6mRMQmfWQja12y+z3RihDbLNjQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118

Files

fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\георгий\documents\visual studio 2017\Projects\Dae\Dae\obj\Debug\Winserv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ