9107c0279e50d64e879818466f67b09c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9107c0279e50d64e879818466f67b09c_JaffaCakes118
Size

384KB
MD5

9107c0279e50d64e879818466f67b09c
SHA1

f755081bd1fef4692d05b0dcefc8b1da7055e54a
SHA256

fdd8784c526d5bbd01a33512c962aaadb80d6c01b688b8b8d8cb22640f37106d
SHA512

1255bf988a4f3e073d15885450782dd4a3617c08cf53ec9461d4f0d126925e5d12037deb11a0eb7d8ca9f011409a8041b76eea972639c9db4e49da8c5725dd22
SSDEEP

768:L45XstgO1r3nIwQ4YuQ6Npl8y98v2LzxXXZOtYcF0Kc6K:L45XstHRIRuHNPPLzxHZS0Kcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9107c0279e50d64e879818466f67b09c_JaffaCakes118

Files

9107c0279e50d64e879818466f67b09c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\[email protected]\Documents\Visual Studio 2015\Projects\ProbadoWatchDog\ProbadoWatchDog\obj\Debug\ProbadoWatchDog.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ