2483b56a0bdeda5fc1ed64629f45e8b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2483b56a0bdeda5fc1ed64629f45e8b2_JaffaCakes118
Size

55KB
MD5

2483b56a0bdeda5fc1ed64629f45e8b2
SHA1

cf46159d3f71dc299741a9458057e60d5004bf88
SHA256

b54a5006d5a320b07d108cc9582eb405c51adfd1eddd08f34ae81f5c1aa2b04e
SHA512

49edaaebab3e565e2d35221dd2a6784e479ce4f38b8e5838bdf9fe02852152a88bc34771ef0f3f84502d5ade6aa22777ad265516d580f55816de8feb73759105
SSDEEP

1536:NDn3kNR1G/NsOCMuvrEFWyC4hG853t1G/NsOCMuvrEFWyC4hG2:NDn3kNiC7yxw853uC7yxw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2483b56a0bdeda5fc1ed64629f45e8b2_JaffaCakes118

Files

2483b56a0bdeda5fc1ed64629f45e8b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\salah mahdi\source\repos\WindowsFormsApp3\WindowsFormsApp3\obj\Debug\WindowsFormsApp3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ