85102800479949e28f12b8a78dfc8965_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85102800479949e28f12b8a78dfc8965_JaffaCakes118
Size

38KB
MD5

85102800479949e28f12b8a78dfc8965
SHA1

6bfec99e24dce3d3b1ad90df04db327c1c498fc6
SHA256

1be330f4eeaeab0a932a405136beb94c9265313dca20889ad44a7bb869de957c
SHA512

814660297a081c0b5d67d9e566d6449da1cb34c2f7b932ce51a76bba3bb528f2203051cf5cff6a729f8ad7a24a595577a12a2f32556ecc98c2ba05c7b336ed34
SSDEEP

768:I9OAKfmDmLY2MnKlaZ1zfSK8oWKi/wqH/ilGbupodaDKc6K:IARfmBn+K8oWKi4qHKcSpskKcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85102800479949e28f12b8a78dfc8965_JaffaCakes118

Files

85102800479949e28f12b8a78dfc8965_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wizzlabs\source\repos\SaveJuin\Nuigi\obj\Release\PissFoa.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ