42615ce2083dcc1ac49096de90ea5140_JaffaCakes118 | Triage

Sharing

General

Target

42615ce2083dcc1ac49096de90ea5140_JaffaCakes118
Size

412KB
MD5

42615ce2083dcc1ac49096de90ea5140
SHA1

8cece3801105262edf36cf10af4f1615afab8ef6
SHA256

e4cd1d744e7cdc91b13deb5d25f6406e724e700d9be4ea876609c3751fc26a2f
SHA512

9a8708eb9f2c5a341b981a1493e4525c9a5c774504e01aa64aa49d70a42a775263f243a2a228b62ae1492fc825d8c433ad4b767186fb6f2d04c87ebb7bf7ab1a
SSDEEP

1536:rZTJM+OvwAvU7h2kgaAWzFsEO7h2kgaAWzFd:pJM+OvbvMGEmr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42615ce2083dcc1ac49096de90ea5140_JaffaCakes118

Files

42615ce2083dcc1ac49096de90ea5140_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\kuren\Desktop\hvh++\WindowsFormsApp2\obj\Debug\WindowsFormsApp2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ