11a39754a1e5c5b9ebb1fe2a49f54ab7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11a39754a1e5c5b9ebb1fe2a49f54ab7_JaffaCakes118
Size

5.4MB
MD5

11a39754a1e5c5b9ebb1fe2a49f54ab7
SHA1

1d4823e48a6acb7b71caeb161dbaf98491856c23
SHA256

8434f7bdb19fc7cc8e01d2ed34e639fbdc12a0a7794293451415ae126fa7bdb0
SHA512

ea3dffeaad45a5da35150ceb6021f38828873191fdefb1c17a6a211145ab055807c2dbfaac17b58b3cc03bba773cff04d7181b839a3648e9464aa7fbb80a06c6
SSDEEP

98304:GkC1GkpZwKvxbSQPh91EG2dc1PD0exxDsgosq+7AXZn4gNQI8YiwOBpIeWD:GJQKZjbSy1EG24gwxjxq+sXZn4gioi1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11a39754a1e5c5b9ebb1fe2a49f54ab7_JaffaCakes118

Files

11a39754a1e5c5b9ebb1fe2a49f54ab7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\ZIP\ZipArchive-Git\unpacker\unpackerXML\obj\Release\kjhfdgkhdfkgh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ