2d5995c37aed84abd8ff6e9312dd7b45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d5995c37aed84abd8ff6e9312dd7b45_JaffaCakes118
Size

636KB
MD5

2d5995c37aed84abd8ff6e9312dd7b45
SHA1

f3a3fbf9a4e0d65caecfe15acf912ba361e59c30
SHA256

301fa8e7bf24e5570c419796c815aad3e144b7d2b6ca22775e964f31fc891381
SHA512

f0894166c81307fc928215b6ba2256240dc067b11edbde4520a2d6d62c9052b76edc3f28970338946ef56bf69a7fae3e25adf08831050fd6b8a292f3df41170c
SSDEEP

1536:4pwvCR+229MGWOoBgkPxGYxf7YviayRtHZIDBzqpGYxf7YviayRtHZIDPCq+:4pwvT9MGWOoBgkPz7Yxq6Bs7Yxq6PA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d5995c37aed84abd8ff6e9312dd7b45_JaffaCakes118

Files

2d5995c37aed84abd8ff6e9312dd7b45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\DoomsDark\Desktop\SearchMyFile\FileSearcher\obj\Release\FileSearcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ