04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118
Size

5.7MB
MD5

04e0c52e54d2ae12b7e63ff8ce66d13a
SHA1

b31fbbb607d8680dbbba60eefc719e3e7a4a58be
SHA256

4f08525822513ee23a45842a58060f6f834e42d13037af2758cb742d19a78e97
SHA512

fa1fc218fe239f713b30ff79bc300a3ca90b7ba55e41f31b8ed976c534d13c39eeedbddd8b8374478eba4c3dce671ddc09bd78d0fc8b72a6e0e601b33b13d6d3
SSDEEP

98304:CC10EC/5Wf9HEbNzOE4TARghrpggvaTnhh7SLl1VoeIxdLfER/MxNtWz/RIr8YiK:rOT/wkbNqE1Ag0aTnhgLl1izqRMntWzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118

Files

04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\ZIP\ZipArchive-Git\unpacker\unpackerXML\obj\Release\sdhsdkvjskdvkdsvn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ