fdc2b05b831f6a91d419c3cc1fa2c222_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdc2b05b831f6a91d419c3cc1fa2c222_JaffaCakes118
Size

291KB
MD5

fdc2b05b831f6a91d419c3cc1fa2c222
SHA1

e37b2fbdacc1b2df7a092cad74b751e156092f92
SHA256

9ae8fb0ece2e10f2cff0a21525dc1ddedc637d769626a526c5a3526ead91ce42
SHA512

a6a495dcb7cda8c85056662b4057d0c5b1099fa75eca8eff19441762d5b47d3697f437075da32063a91af749241cc63060744c2f89a155af01ae2ced78515c9d
SSDEEP

6144:aXZkpoTAXDEwXDr/2/X7GMdEM4ShdQknAwbrFvdMHmn9vRkVEi:cZmosz3X2/LGMdGSHDdbXUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdc2b05b831f6a91d419c3cc1fa2c222_JaffaCakes118

Files

fdc2b05b831f6a91d419c3cc1fa2c222_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Build\C#\Bypass_Syscall\KanonSys-master\obj\Debug\KanonSys.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ