fd8dc3e7c2da292e293be84d6988cc0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd8dc3e7c2da292e293be84d6988cc0f_JaffaCakes118
Size

55KB
MD5

fd8dc3e7c2da292e293be84d6988cc0f
SHA1

4dd5e817c935b7cc790a51dc6f9b7eeac1a4c761
SHA256

8ceaca16826358d06dd5ff61af6305424e605c33f56d7ee3248c6915858858e8
SHA512

55c4fffba28b51c7e9f060abbdd81565714f33549d63283ffca0cd23f38ffe0c38ef80fd4de07812b02740ed96c1707c285854408ba5580a80a8a64a6a4a9c59
SSDEEP

384:tws+fjj4WNra89b7OmoL2KZct9ANwPfWAhV8UWC5tnhwViKf:+j4vQbtJA22AhGk5tnhwViM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd8dc3e7c2da292e293be84d6988cc0f_JaffaCakes118

Files

fd8dc3e7c2da292e293be84d6988cc0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\codn5\Downloads\Http-Asynchronous-Reverse-Shell-master\HARS_Client\HARS\obj\Release\ms.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ