f3a698594ab925f37556993943a1db04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3a698594ab925f37556993943a1db04_JaffaCakes118
Size

316KB
MD5

f3a698594ab925f37556993943a1db04
SHA1

29e8817017854b9a1262c02ad4654be8aea59022
SHA256

0caa0c2b5950b13e2d23b5ea8db7e8dc70903bc017c4a01d093cd44ef297c415
SHA512

5e9186143d07f9a8ffbb94db2cb89eeb3074448f954e10dcdd3ad33b3f1ea82d246a5527a4ccab28e965b3b6484d106ede5062fe1a027dc3728b58e3fb1f0490
SSDEEP

6144:4Tb+VgVx9jeWmFgahK9BwiKe/RVYJ5FEaNs9vAQMhU:4/EQe3zK1TmfsahU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3a698594ab925f37556993943a1db04_JaffaCakes118

Files

f3a698594ab925f37556993943a1db04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\aymen\Desktop\Obfuscated\Obfuscated\WindowsApplication4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ