50de42cff88393e62f8137f9d713cd5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50de42cff88393e62f8137f9d713cd5e_JaffaCakes118
Size

262KB
MD5

50de42cff88393e62f8137f9d713cd5e
SHA1

923f1b340202c16dee4ee055119e5eeed9f7ec3b
SHA256

86ed97638fdfd72e9cc7d0eda879a79f7e118c43e6dd182e5bf5bd8a37a91ad3
SHA512

a3006e6708353df37e302ddb9810eaa99bc15bf1930cfce80fa992500bca110888e76127509f61b4531c883c40929ee6bd5114b315f8377d77019f9cee24d150
SSDEEP

6144:u7QMcuHE/ICxW0fRwN121E7SyEhXPUL9Vr:EQDuHkxIY2Ky1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50de42cff88393e62f8137f9d713cd5e_JaffaCakes118

Files

50de42cff88393e62f8137f9d713cd5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\AymenTLILI\Desktop\StarterPack\StarterPack\obj\Release\LiquidTemplate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ