13b1f08fda729c297276c7ce12a6eaf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13b1f08fda729c297276c7ce12a6eaf4_JaffaCakes118
Size

20KB
MD5

13b1f08fda729c297276c7ce12a6eaf4
SHA1

98c4d261896ad3cd765ba85155e937be4764214d
SHA256

16ca443ba05c25965899a2508125b5dd809ce5ead2de694a4b9339868be0f51c
SHA512

3d87e5340ece08c001d91e39f8beabe8d5b666bf7dfa69f8a9a036d207160032fec70495b731a63ae37ef7ffa2111f199c263144cfbf2365188db2a808398638
SSDEEP

96:myBzve7onQQfLqGXj/UE/MTkBsaUaPZz5Pu0gOs/lpG17TmLFVxckAg9ZyAYav0:m0fLZrU/0lUahF9g7/fGM3Ag9AAX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b1f08fda729c297276c7ce12a6eaf4_JaffaCakes118

Files

13b1f08fda729c297276c7ce12a6eaf4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\amir_civil\Desktop\MyProject\ConsoleApplication1\ConsoleApplication1\obj\Debug\ConsoleApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ