JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b | Triage

Sharing

General

Target

JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b
Size

703KB
MD5

883d243ebeb7842c7ede5bcc4ae1926b
SHA1

db529d12e8dba880365721539503aea82abe52a4
SHA256

0ac80e003ddb4327be56f390db7b9a06e8ae0806c6ee00ad414d2b25d2637235
SHA512

e675e4967e12a1531a5f51a93404512ac7bc73c2b1cf342c543ee039242795816742424862c9cfa00ba9b02e103fed2cb3e989e270b1d0ecded43d6727d65528
SSDEEP

12288:HiE71I2/tNJQ2WKCqhRxcV9L0s7IcupNtn32t9/leggM4hNnneLB8:HiE7O2/bGiRxcVasRsNtG79eggMwNneL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b

Files

JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Projects\program\program\obj\x86\Release\program.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ