05a16abfb454bf28841ee389d5211de3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05a16abfb454bf28841ee389d5211de3_JaffaCakes118
Size

13KB
MD5

05a16abfb454bf28841ee389d5211de3
SHA1

884cd44cb1fa5ecfd91de7dc1043f0d9e9b75646
SHA256

c57c3ded4c729cd70f4d845b7e7682f26ea780e4ab85920402527e77ddb0ac5e
SHA512

808640b070aa011a6855a5234c322390642670afc11b2362feb106558a700a0d03e3b7dcacfea78b4da25680f9bf8de76eeb2f257ad751d204bbf7c898f3d1f7
SSDEEP

192:JAl3XQzZmgnloYk4ZNIDLTk7ksGQxtp12j:JO3XQdE47+LTkwsJxTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05a16abfb454bf28841ee389d5211de3_JaffaCakes118

Files

05a16abfb454bf28841ee389d5211de3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\LIMA\Desktop\1\Application1.0\ApplicationLOADER\ApplicationLOADER\obj\x86\Release\ApplicationModem.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ