7401b26d8e68ccfea933e24f3e67dcd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7401b26d8e68ccfea933e24f3e67dcd2_JaffaCakes118
Size

200KB
MD5

7401b26d8e68ccfea933e24f3e67dcd2
SHA1

886da418dacec7424e5c4b937d49f177a851a872
SHA256

ca3f56d4c9833137bbb43f576c288ac96925924645ff15b152c8c20ed19cae2f
SHA512

0fd3249e3bb1952c4a74e76f8bf50a9b6342fd5c488f22fee5e6cf9f17cfc32706e5f1964b4a9d14d657ff64e63552ecc1596cb5b909a65c34aa3fbbe3facb1e
SSDEEP

3072:SDHbRxen0Y9zjcagMMMZMMMMMMMMMMMMkyKrY:A8cagMMMZMMMMMMMMMMMMcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7401b26d8e68ccfea933e24f3e67dcd2_JaffaCakes118

Files

7401b26d8e68ccfea933e24f3e67dcd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wizzlabs\source\repos\SaveJuin\Nuigi\obj\Release\BlockBirra.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ