63e576f7176b6f5a0b292785e32881e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63e576f7176b6f5a0b292785e32881e7_JaffaCakes118
Size

35KB
MD5

63e576f7176b6f5a0b292785e32881e7
SHA1

e59186b59b0f8fe4085f64e9ad6da4fb3b9f7a86
SHA256

082befb7374892ee211b19fff780f3357d9548acd85de91e0c3e6b834350a7ea
SHA512

74b6984d05303e05a277ce8c6a459c4fda5adef95dc9957c9e4c6559cac7982a157827b6c97637d0f078b448774e7af291d1e08c361003e31b3b5eaccb4015c7
SSDEEP

768:umQ9hFHsEM4Kc8WtaqRtKubiygbEnSfy7x0E:G9vcu8t3fy7x0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63e576f7176b6f5a0b292785e32881e7_JaffaCakes118

Files

63e576f7176b6f5a0b292785e32881e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Krolik\Documents\Visual Studio 2017\Projects\RAPORTY\SUPPORT\obj\Debug\SUPPORT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ