6a678495ce95dae776f0f27c398a83d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a678495ce95dae776f0f27c398a83d7_JaffaCakes118
Size

129KB
MD5

6a678495ce95dae776f0f27c398a83d7
SHA1

f8c0fb92429aa0961be4c94c47cfa8b3077a0d0a
SHA256

72c1ae3b86f6d4333bb0ef2877544becf97ba8ff583d2eaffc6b9e002f1d50cf
SHA512

c012b2c630d11988ae79d06d05861a400f413aace572f262b725829378c7b17566523099cdc256f0d0044b348522f5f1b2f9b41cf5cd1bde1ebe3f7641574945
SSDEEP

768:xuWU2bQL8dmrblOHwc/QvVsMj60sQ5AX899biMjB4wf0XFJ8XRID9eJVrimhOrYD:8Aldmruwc2ssAXuglXJeJRThO8D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a678495ce95dae776f0f27c398a83d7_JaffaCakes118

Files

6a678495ce95dae776f0f27c398a83d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wizzlabs\source\repos\Cirmatorassa\Cirmatorassa\obj\Release\KhaltyBj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ