2349c7f46094bb7d686bb33e8ed629dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2349c7f46094bb7d686bb33e8ed629dd_JaffaCakes118
Size

592KB
MD5

2349c7f46094bb7d686bb33e8ed629dd
SHA1

6e9ff23be9602b531d787404dd619356575adbc0
SHA256

358151242c5546e1de8cd6c2d3935d58a349013ecf817940aa503fca8b7424c0
SHA512

56da006d2fe5b110f116dd5a6f0ff541e94f934abd9a9346c0e2df1f93421e7f234f29b55fcc9f49224563bc3eebe06498aa4593e19d24b5bbf6ba77315d7e3b
SSDEEP

12288:oFx8R2hxcxNBswufCYtPKMVVW8k1QBMk6t980tKVjndSLIjN:sx8ohxcxznYtNOQBbg800Q4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2349c7f46094bb7d686bb33e8ed629dd_JaffaCakes118

Files

2349c7f46094bb7d686bb33e8ed629dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\sami\Documents\Visual Studio 2015\Projects\TpLink\TpLink\obj\Release\TpLink.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ