c986898e09676df376934178651844a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c986898e09676df376934178651844a8_JaffaCakes118
Size

2.1MB
MD5

c986898e09676df376934178651844a8
SHA1

7b7993a8fcae2394b9f415923589897bef5239cb
SHA256

9b2a5c9961fec4eb5b8c2e2d7d7cd64ca8a7f28dea6d9ae59db274d1cd6dae64
SHA512

a920f45664c2a12f7bb0b474fc5e98f4b0cf24b0efd84807537ce025c212ef37cb0125c4765566a786d7131b9cd85e827dae606f16db284480635efac8f4386e
SSDEEP

12288:c7XtCiCkCbNNsaVHoqw55Uk0i7ntc/7nt+4BFzbH/KinDexmasyOpD7ntb:aUmAHeUy7tc/7tzLOcakD7tb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c986898e09676df376934178651844a8_JaffaCakes118

Files

c986898e09676df376934178651844a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Sistemas.VbNet\Caxxa\CaxxaMix\obj\Release\CaxxaMix.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ