71c331a7bb819df1763ae220e6029f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71c331a7bb819df1763ae220e6029f41_JaffaCakes118
Size

380KB
MD5

71c331a7bb819df1763ae220e6029f41
SHA1

bf0993ff2b28ed63bb1097488bc1da2811c27095
SHA256

d8ffced99572be0ade53583e61e1af928ecd68a00e4cf149883e1dd299ce3224
SHA512

cb66b98d000e91a76e97ecf8260de4aa2dd53cfbc9f252e30fc8dfd9a780dd516f0144b1d857cf77def6a7847882430666c9c832c71e718bebff7a2b17446367
SSDEEP

6144:4Xu/7+QxDiM5snMvB0EmKLZPDvOBpqgOM6:97hf3bvOBpX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c331a7bb819df1763ae220e6029f41_JaffaCakes118

Files

71c331a7bb819df1763ae220e6029f41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\DoomsDark\Desktop\JsonWAY\JavierJson\Publisher\Publisher\obj\Release\Publisher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 374KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ