40b2fce370c9a666507b619f96e57a8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b2fce370c9a666507b619f96e57a8f_JaffaCakes118
Size

769KB
MD5

40b2fce370c9a666507b619f96e57a8f
SHA1

0298ce30499e9df5dabcc3a79073d109d11ef2cd
SHA256

915dd837bc865a828ca321e9c9c5661ac011293d4c201772db04085a2e2c9046
SHA512

8ed668067a865241f77786b1c759872d7e3f6357cea34e9af069e2c03c0713613f67d66f36a4440d16378f1be011e2f58543b70f243c71a5884f5a0a4688da7c
SSDEEP

12288:gTtkAiWUnYFIuUWq1dXWWPE+F8tH7Szv9J0DiKrAXBmqAdQEKVsXx3cywspuM9o:gTTr1MxBibo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b2fce370c9a666507b619f96e57a8f_JaffaCakes118

Files

40b2fce370c9a666507b619f96e57a8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bartek\Documents\VS projects\HARD_Downloader\HARD_Downloader\obj\Release\HARD_Downloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 759KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ