JaffaCakes118_29ce388b03b7573b82bc3dff29d4571c | Triage

Sharing

General

Target

JaffaCakes118_29ce388b03b7573b82bc3dff29d4571c
Size

401KB
MD5

29ce388b03b7573b82bc3dff29d4571c
SHA1

a9d03be13e4d784ab6c1e7bf51b9b40bcf806f0e
SHA256

eb0fd450dbdeaec7e8d2387918060f162e9c76d412636ce8aaf6fb26ec1c571b
SHA512

758005e3d27d9e5bb1420d172c714e6931eb29b0d32af48a8ad6d677ec3b8c17b514ed825f94eee4cbd914e5647ed6505695ba020cd9f4cc85e7b1d3b5102aad
SSDEEP

12288:v8ow7j1Lq81I1JOk2AIqgD4U7OsVv0cxtdZ:Enj1msk2hqgHVc2tdZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_29ce388b03b7573b82bc3dff29d4571c

Files

JaffaCakes118_29ce388b03b7573b82bc3dff29d4571c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dervie\Desktop\Azure AiO\cStubnew.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ