e9876b96ef66c2dcfc3e7d3f471ead7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9876b96ef66c2dcfc3e7d3f471ead7b_JaffaCakes118
Size

63KB
MD5

e9876b96ef66c2dcfc3e7d3f471ead7b
SHA1

c0d563000cd329532d5e41677ad30a678c270845
SHA256

f9fb86c2a20c6b5ebd98ec1254aaf07ac7deb380d33fad8573a855fb4da922d5
SHA512

bc85e991df9b776adcb040dd909d5a1f0c0dc885459a84b98b81849ddf06250d61e1a72840b2de8be56efaf4893c62a4d1857fadc13a68c4928f5bbd62996e0b
SSDEEP

768:U2umh9tRafoXiMARZE9OnjMbIQvHdBCuZRUCZqBitm0w4hoGSKb2+Q+JOEtmhf4P:oOSMArnAHdwa1q0tzw8lBJONL4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9876b96ef66c2dcfc3e7d3f471ead7b_JaffaCakes118

Files

e9876b96ef66c2dcfc3e7d3f471ead7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Erkan\source\repos\ConsoleApp3\ConsoleApp3\obj\Debug\ConsoleApp3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ