87d01d105b8c18b585f444fd97992678_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87d01d105b8c18b585f444fd97992678_JaffaCakes118
Size

653KB
MD5

87d01d105b8c18b585f444fd97992678
SHA1

d8bc9d5ac8909066a1a0e5bea32d6db2e83412c3
SHA256

fff5e3e60c04305b0e99ab568997504ef9f908e92998e27eb3d85bc8109f6d5c
SHA512

b8103113567fe2e3d8b2ebac40ae56cc72034144c3c46fa0a790d8adacc0f8814207d49bb096444e1703370d5bca0b14b244ab672d379444135c09886ffa2be9
SSDEEP

12288:ljO0dK1c+oKGiydyLPU5GMM8/C+g+M9gx0g2QDVv:ljOF1c+ovdCIGaC+32wv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87d01d105b8c18b585f444fd97992678_JaffaCakes118

Files

87d01d105b8c18b585f444fd97992678_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wizzlabs\source\repos\SaveJuin\Nuigi\obj\Release\PissFoa.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ