9d524c9b96b6b702db9aa8b8ae06c5ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d524c9b96b6b702db9aa8b8ae06c5ec_JaffaCakes118
Size

15KB
MD5

9d524c9b96b6b702db9aa8b8ae06c5ec
SHA1

0d01162361f5c2f2acc6600f274360ea6c257174
SHA256

5473ddd721144037a7106e1ce842e36530fa90052d8c7be15ce73d15f67c8021
SHA512

156c328750bca2f8430b77df40e4c6f8ef0f6b2de0fbba1a3cab9577a0753831ce4a5387045b183d37601652ac155c5b0ee6558043cf123827629266d6b6a507
SSDEEP

192:l5gQR+bmNGCGyuQafOG8aYclgN3pgnaO6n8y0dn8y08Tcm2RGO+:RNGxyuffOGHYckinC0d08T2RGO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d524c9b96b6b702db9aa8b8ae06c5ec_JaffaCakes118

Files

9d524c9b96b6b702db9aa8b8ae06c5ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ram_m\OneDrive\Documentos\Visual Studio 2015\Projects\syswow con interfaz\facturas\facturas\obj\Release\facturas.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ