2885d06fc99bffff1f1655ae91d884ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2885d06fc99bffff1f1655ae91d884ea_JaffaCakes118
Size

9KB
MD5

2885d06fc99bffff1f1655ae91d884ea
SHA1

edb358bb6a7925316bdf600e4d6a10b45320c4ae
SHA256

b5f8ccde2aec69a5049757e7fe0ac74f197826da9beb73881421b337ceee922e
SHA512

3d9e5fce23315e9bd37a2862ac07cf5c7b2d0c37c991a4c0e9c7df275053b2f644c7d755e6d0467625e7e7275384071d1c59a3e5b2ce4ff7cfc740a95fcf763f
SSDEEP

96:xbhFlnpLTVWMcajB4KQNauS/b58AJSbIoIIFF92XKnLDcYPB3xDlJK8WZzWzNt:hPoMdz5ZnwrIsqKnLDjBXJZWdw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2885d06fc99bffff1f1655ae91d884ea_JaffaCakes118

Files

2885d06fc99bffff1f1655ae91d884ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tyler\Documents\Visual Studio 2008\Projects\Autopatcher v3\Autopatcher v3\obj\Debug\Autopatcher v3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ