7a03fd6106ccf69af0f425df63f4e8c3_JaffaCakes118 | Triage

Sharing

General

Target

7a03fd6106ccf69af0f425df63f4e8c3_JaffaCakes118
Size

1.2MB
MD5

7a03fd6106ccf69af0f425df63f4e8c3
SHA1

e9b70bfd94efb8c892f5732769b3a4798e0e0b85
SHA256

244c26459fa925a4cd8593a0a4d8568b43759cdf647c24563c396da1b0a9f864
SHA512

9f033c0f7d42aa091db78d0148595ebb8bfab7a8d034f8edf603618ffb7b186801db8328c6ebb02d45248d80c53e7fcad667ab7d6a3a036d40607c920b614bff
SSDEEP

12288:lzKgQY6bK6euVGEWwljysIwljysIwljys9zqiSwljysIwljys:lmgQY6bK69VpWwkwkwBEwkw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a03fd6106ccf69af0f425df63f4e8c3_JaffaCakes118

Files

7a03fd6106ccf69af0f425df63f4e8c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\adamv\Documents\GitHub\NewSickGT\DetectionsDebug\WindowsFormsApp1\obj\Debug\SickGT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ