6d76e5b4cb2ca92c50c7d3dc73811c02_JaffaCakes118 | Triage

Sharing

General

Target

6d76e5b4cb2ca92c50c7d3dc73811c02_JaffaCakes118
Size

148KB
MD5

6d76e5b4cb2ca92c50c7d3dc73811c02
SHA1

4fa13414db4427214fdf1ed12c58120d3c1bbd31
SHA256

a5e85973fe83036255b3fde1c6884ce751ad116cef26ef1035c8cdc9c0a6de5b
SHA512

baeb7cf57cd25f3b92e6e26ba39760897ed0db2549bc5e68157703522efe1dc8dd1431747330153cfefed3ba6cf945db50325e704d4bfc13d09a0e40f0e99491
SSDEEP

3072:aYVRgHGvamHglMx6t5Qz2RQVrx6t5Qz2RQVjgG2ABwh4:a2uGL6t5DRil6t5DRijd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d76e5b4cb2ca92c50c7d3dc73811c02_JaffaCakes118

Files

6d76e5b4cb2ca92c50c7d3dc73811c02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Desktop\tela de login\tela de login\obj\x86\Debug\tela de login.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ