4545cf4a5390c2e2df3f2f03bb7ae554_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4545cf4a5390c2e2df3f2f03bb7ae554_JaffaCakes118
Size

220KB
MD5

4545cf4a5390c2e2df3f2f03bb7ae554
SHA1

6d3d77291200165c45bad24b0c4366b6af447bf0
SHA256

a67390c3a144f76379766a92795ae78199bd749757f31ea49c9e7dd3245aa1fc
SHA512

693e311aacf062b17e8a1755008800c4c6977e0e8605ee3c9d11eee5fc1896afc17dcac27bffd460328555062a6b8206e7779a1f99a573840adac7955164c8f6
SSDEEP

1536:Rmg8kW/zf1G/NsOCMuvrEFWyC4hGC53U:Rmg8kWzMC7yxwC53U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4545cf4a5390c2e2df3f2f03bb7ae554_JaffaCakes118

Files

4545cf4a5390c2e2df3f2f03bb7ae554_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\salah mahdi\source\repos\WindowsFormsApp3\WindowsFormsApp3\obj\Debug\WindowsFormsApp3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ