f1fad2961ed4f61b85a1c90ccc14dab9_JaffaCakes118 | Triage

Sharing

General

Target

f1fad2961ed4f61b85a1c90ccc14dab9_JaffaCakes118
Size

63KB
MD5

f1fad2961ed4f61b85a1c90ccc14dab9
SHA1

d2dd89e9be79af3ce8c0ff77c390f0718421ca32
SHA256

55824d3e2b4d1179db305025a448310d7e0496257e6a8d3c502aa1ce5ef53655
SHA512

4343b10ddb54b32198839044498f14a36e0e2d19ffb69b41da477d3f58fcc4998233648bdd2d39c7ce2453ee0b060dfdc6829f60840f5979a901e12a9cb58ade
SSDEEP

768:9FFAaEs6GQ4uLFL11zR5ECLkqdimKL7wJ6QM0meicl9b6GvoQsZ3bZ5:9NQBP1z8ykqgR/QM1cl9+GvoQ+bZ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1fad2961ed4f61b85a1c90ccc14dab9_JaffaCakes118

Files

f1fad2961ed4f61b85a1c90ccc14dab9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\M.Magdy DZ\Desktop\HaCk.OnE-Stub\HaCk.OnE-Stub\obj\x86\Debug\HaCk.OnE-Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ