27320b19487ec07f2d81f61af0fe8d45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27320b19487ec07f2d81f61af0fe8d45_JaffaCakes118
Size

939KB
MD5

27320b19487ec07f2d81f61af0fe8d45
SHA1

2d9b93f99d80d4b5b049432019fdfb8ac8a0d4e1
SHA256

b26ded5e9c58ccea16aa0cc08878b86db0d4d52c597dc4c141a51db2f4a98e29
SHA512

68cda345f470d40c625d3b271a2d2b876ee8e3d236206bf661d0d09a1ee2eb5fac2626f13481af3cb254cb8a48728aceeaed0f92a8db98e84691e51988423718
SSDEEP

3072:0jqDmVYVuCcH26+gy6UdB2Tx4mV4jOLl+FHEjsIMmsJjqDmVYVuCcH26+gy6UVBt:0ogUXcx427Ll+FHEjkJogU/cx+XMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27320b19487ec07f2d81f61af0fe8d45_JaffaCakes118

Files

27320b19487ec07f2d81f61af0fe8d45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\DoomsDark\Desktop\Emree XMl\TextTalk\TextTalk\obj\Release\TextTalk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ