fe26727a851d466968133d25061fe5cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe26727a851d466968133d25061fe5cc_JaffaCakes118
Size

7KB
MD5

fe26727a851d466968133d25061fe5cc
SHA1

95471d4d0fb57a1cabbbf4495754dd6bb9e28b03
SHA256

fa43db52524231a627564560a50af07459061f455cd43a644064b29a1dadfdb6
SHA512

a1edbee4fb9783d4cff03a99e13d5473866be665e91886aa7ab11559f7728ce0ccc55dac755f9f4b357ed23ae8e1111cc6eb5e9ad3c89112e9daa16a138a6e0d
SSDEEP

96:GQEeGAhUZB9XdcAD9ODaOYzdm0l99yi1bYFx9L7kjZ143RzNzNt:GQVhMtOADwDaOwdivkjZu3Fn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe26727a851d466968133d25061fe5cc_JaffaCakes118

Files

fe26727a851d466968133d25061fe5cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\coding projects\lovely geoip\lovely geoip\obj\Debug\lovely geoip.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ