54cace2155bef0aabd15b028fb61e5b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54cace2155bef0aabd15b028fb61e5b2_JaffaCakes118
Size

95KB
MD5

54cace2155bef0aabd15b028fb61e5b2
SHA1

77c31fd990817d1be1af0b45d5b6005820487a0f
SHA256

79dd59ffc12ace44147ed215e21ae593c1135d96764f2f80216fdcf2c52863ed
SHA512

0ed9fcadd744086930afeb5a57e3891c1449115d0996ea638b0fd4679906c2e11e0cabf28c3bf27164f15891ec54e0d57fe8c2a6e4735de43df5bc51b834a602
SSDEEP

1536:1OS+YO3Fe8U7P5DTGZjNhgm1bA8n+UbTE/+Zmpg2fHMzO3Fe8U7:1ONjn8hDkjc6bSqTW+Zmi2k6n8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54cace2155bef0aabd15b028fb61e5b2_JaffaCakes118

Files

54cace2155bef0aabd15b028fb61e5b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Konrad\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ