fcda515b77ab98bcf0818e1dda88eaee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcda515b77ab98bcf0818e1dda88eaee_JaffaCakes118
Size

448KB
MD5

fcda515b77ab98bcf0818e1dda88eaee
SHA1

5f7cd8fdbf3307dc1cc9286c1b91a537523aba73
SHA256

bc0d302e8366847ea66ee3b4d1792ea668047d2d9e43570d72db634c654735c2
SHA512

da2020866b82a896ca7e626562048980a4b3349c5a93598f477d9b72f0334b859dcb240d4dfa30c4c45990be94205b259124a357b9f395579694483cc4758bae
SSDEEP

6144:hRxQDOmlrWXJmyBvrvQDXi5swVeAJAFAvpNwmUSptqOLdSyxQp+:dGlr2BvEripAnFaDwszLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcda515b77ab98bcf0818e1dda88eaee_JaffaCakes118

Files

fcda515b77ab98bcf0818e1dda88eaee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Projects\Sentinel-V2\client-ui\SentinelUI\Launcher\obj\Release\Sentinel.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ