9df0e1ed5ba6bdd2c52be6de3377f1fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9df0e1ed5ba6bdd2c52be6de3377f1fd_JaffaCakes118
Size

2.5MB
MD5

9df0e1ed5ba6bdd2c52be6de3377f1fd
SHA1

3bfa1b01ab8cc8b60f9805cacd98ede7d5376565
SHA256

dfe94f322e8a9033690ae56bd4ebd391cab9583f9802961b97c573b5f470fa45
SHA512

5b88cc1de972233c4152c56204d7d4c579295dd4c3d5a347d5975193f7a4c202f2b4b31f9e2838b7360f0018bbeebb4dd0781e6438ef8fa522900f97c96bf8e3
SSDEEP

24576:SjpG15/kNSjA36DhNebP1RFL0cn04QuTJznqlpxlX50V8uDrF12jlWo1RtpiCr4:E1m1Rtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9df0e1ed5ba6bdd2c52be6de3377f1fd_JaffaCakes118

Files

9df0e1ed5ba6bdd2c52be6de3377f1fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\AymenTLILI\Desktop\StarterPack\StarterPack\obj\Release\SamiaAdou.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 977KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ