155c15fa44f501df0e5cf64a40dda8b7_JaffaCakes118 | Triage

Sharing

General

Target

155c15fa44f501df0e5cf64a40dda8b7_JaffaCakes118
Size

1.3MB
MD5

155c15fa44f501df0e5cf64a40dda8b7
SHA1

98b748c9a27d7da0e803035dcfb6e8425cd006c7
SHA256

578eb32648c415f048d0a357ec5aba580ee14292ce77cc143fbbd9bca9f22b47
SHA512

b69eaef73dd1e1fea43d53197dfab70d3a672885d07547579d2f929978d0ed288b59e0b5af39396ee06e913589a72dab7302d114541353a2e964f4d09b46bbe8
SSDEEP

24576:SDRfULfyBlOI29Pb7OGPOjv7URO0lfIlmwMRvPlmKEYlmIQMRSNWK4YC:SVklgzpmwMJK7C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
155c15fa44f501df0e5cf64a40dda8b7_JaffaCakes118

Files

155c15fa44f501df0e5cf64a40dda8b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jack\Desktop\Windows\Kryptos Source\Tester\Tester\obj\x86\Release\Tester.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ