171f0808c28af50a478f8b52d1f0f13d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171f0808c28af50a478f8b52d1f0f13d_JaffaCakes118
Size

20KB
MD5

171f0808c28af50a478f8b52d1f0f13d
SHA1

9ca7084a3e77a0866feafc6605aa9665b83a88c5
SHA256

4a96f299a9288b2d43eb1fdf028346b16c7bcf6572b7b831419232f0fea2d2a6
SHA512

23dbcc46090f5732d970e110eb8bdef14ee393c97cc341b34658ddc4c80dbe8881d4cbb1082ab76db1dd1c0bf7ceddcb22df679cf029dfbda223ac83cf010813
SSDEEP

384:lhtmEbsEdJKYsbN0VN6OLX9wQV7I6kAQaImD+58lLKFIL:3brJKYsbN2N6u95dDUAOW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171f0808c28af50a478f8b52d1f0f13d_JaffaCakes118

Files

171f0808c28af50a478f8b52d1f0f13d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\michael\Documents\Visual Studio 2010\Projects\K14rWorker\K14rWorker\obj\x86\Release\aworker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ