12452ccfda85ae2dd8c69d6d82e3a23e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12452ccfda85ae2dd8c69d6d82e3a23e_JaffaCakes118
Size

845KB
MD5

12452ccfda85ae2dd8c69d6d82e3a23e
SHA1

95bc84663866627f8b9d5dee2570491cb6fe45fe
SHA256

3f623e60467d67889792b9f41761a4a61b3898ee84f74d1e2cb28a3b3f8c74a9
SHA512

f90a18c31c901e491d78fd40f1ac282b2bf01515989f0130b0e2ae4d77ee1355fe021b4058200aa38e9a0cf283789656aff169936fb7c3aacacd0a0e6a4aef99
SSDEEP

12288:zr69ur3v7KX9MA/iweKAwCN3SPQSVTN5TFhY8V8SIxDQuCkUVqdKSCa5RbfKl:zsk/ehnAwCNMH1hMSIxD3UId3COb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12452ccfda85ae2dd8c69d6d82e3a23e_JaffaCakes118

Files

12452ccfda85ae2dd8c69d6d82e3a23e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wizzlabs\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Release\Notification.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 539KB - Virtual size: 539KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ