4962096683abbb7c77739a8097ddd3bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4962096683abbb7c77739a8097ddd3bf_JaffaCakes118
Size

638KB
MD5

4962096683abbb7c77739a8097ddd3bf
SHA1

696ae44a231a2666e3eb785dd19a35a6b66f8d04
SHA256

9b8b323564c976c279d656a0de93a5d9934d0d7d0369bd433e2207047abbb58d
SHA512

8fbd4c5b86c928b571b0505e180c44c7356b10204b3537368753b59d7bfdffad7e3fe0da631544191ed185985da811f7ba6143d3f5a7ba99ee630bcdc1af8060
SSDEEP

12288:5hQp6WSJEh+lI58/QGRPO9+fdGHuA6bEaJJ0UNENJmVTPhqLnrBk:5h3TiIgUfdc6b1AtkpqTrBk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4962096683abbb7c77739a8097ddd3bf_JaffaCakes118

Files

4962096683abbb7c77739a8097ddd3bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\sami\Desktop\Dts\DtsSound\obj\Release\DtsSound.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ