88026d20d8f9f5ca8479219f0b0aa81c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88026d20d8f9f5ca8479219f0b0aa81c_JaffaCakes118
Size

357KB
MD5

88026d20d8f9f5ca8479219f0b0aa81c
SHA1

ea6d2d4681cf660eeba8e6f88f5504a62a17c3ee
SHA256

828519716dc08d635d8e940e6cf64ec3dd5cb1d5defdcc2fca65d58af7568641
SHA512

698f4b3f620162e036e83c26bc09199604b623b0ea533c92eb175596cae64c1e51e7d9a2543cf2bf1a735bdb36c6135916c224d2ed3986be44b14b1a13897482
SSDEEP

6144:f7BLL/nAW5BNQziaMSeIzmO3eFs21iMk2UE0uo:f5Lx5BNQzRwUmO3f21beE0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88026d20d8f9f5ca8479219f0b0aa81c_JaffaCakes118

Files

88026d20d8f9f5ca8479219f0b0aa81c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dr-West\Desktop\ًََُِِّْْْ×ًًًَُِِِِِِْْ×ًَْ×ً\ًََُِِّْْْ×ًًًَُِِِِِِْْ×ًَْ×ً\obj\x86\Release\ًََُِِّْْْ×ًًًَُِِِِِِْْ×ًَْ×ً.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ