7d75bfbaca34c7d5eb7ef45570dd4caf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d75bfbaca34c7d5eb7ef45570dd4caf_JaffaCakes118
Size

191KB
MD5

7d75bfbaca34c7d5eb7ef45570dd4caf
SHA1

9491e404d6e9047b693158ce35f797f88f2a6822
SHA256

8efc411e93136d7b611e5af9c3274df8f546b4fab14db0f2d92793a2b5cfab9d
SHA512

c267e72898f5455f31359fb8fa0100c8d5939fd333434c58b41dc59b830ca5d1418a4c51404c9437a07b52949b861e6289e1360ec8012357c6c2a703dd925f71
SSDEEP

1536:O0rGJaYRk1ZtdUAPcgMQ////Q////Q////Q////+pwwww8p+pK/k/:O5Jaxt62Ik/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d75bfbaca34c7d5eb7ef45570dd4caf_JaffaCakes118

Files

7d75bfbaca34c7d5eb7ef45570dd4caf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wizzlabs\source\repos\WindowsPresentationFoundation\WindowsPresentationFoundation\obj\Release\Arabesque.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ