JaffaCakes118_a1abac9488a0fc642d21b64df10ecb93 | Triage

Sharing

General

Target

JaffaCakes118_a1abac9488a0fc642d21b64df10ecb93
Size

32KB
MD5

a1abac9488a0fc642d21b64df10ecb93
SHA1

e769042b81b21f397e45146c692ba4ff6f8bdb02
SHA256

6dc6d0488aafd93e6429b763b804d23e873c56369db5ebff2c39a77c93f2bb38
SHA512

2bbe90116d8a60ea6905918c09a7589d2c2034cf24d94aec0342554f2554b469ed634e75f952d5b82dcdfa943355c3f6d5fec206882bf2f0fa32783a53973871
SSDEEP

768:lantajTJN8bYeeTJ3f8le8+6bgZUfWq/o6gtnlsX1:lGmTJN8vWNUle8+QgZPnlsl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a1abac9488a0fc642d21b64df10ecb93

Files

JaffaCakes118_a1abac9488a0fc642d21b64df10ecb93
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Autobusi\AppData\Local\Temporary Projects\me 4\obj\x86\Debug\me 4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ