8ed898683d9893a96b37dc2adcc493d6_JaffaCakes118 | Triage

Sharing

General

Target

8ed898683d9893a96b37dc2adcc493d6_JaffaCakes118
Size

311KB
MD5

8ed898683d9893a96b37dc2adcc493d6
SHA1

190b6da8da04dadf5f7a57728ede22f66462801e
SHA256

b6f5891306c0e2f17bf9b15bdcb0abe522dcfc120e133cbd72c8812a046616f1
SHA512

ac4ea71aeee3708c3878842295d347f810034af542bf4db8f4e0e8b0f6771bd4963d7d8d2859a9322c64c2c7f08c29f8a6ce3686f66606cba7610fd06d0e84d8
SSDEEP

3072:Q23KICljPiCunmnfOqd023KrhJHs+PVRN6B7Eb5Z82n0sqnBIYKyfeKNWxZIma22:5wKCunyftAhl4E5Z820tII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ed898683d9893a96b37dc2adcc493d6_JaffaCakes118

Files

8ed898683d9893a96b37dc2adcc493d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Marijana\Desktop\Source Codes\Dork\Dork\obj\Debug\Lazy Mans Dork Gen v0.2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ