a2198895fef564a8f7bceee009bbbe7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2198895fef564a8f7bceee009bbbe7d_JaffaCakes118
Size

199KB
MD5

a2198895fef564a8f7bceee009bbbe7d
SHA1

fd655f2a1436b72376afcaeaf99aace332a8c5d6
SHA256

697fd45bd36b079fece5f2dd7d46640a39a124cc493cd5a1226a0ab27d09ca3d
SHA512

5926619391359151eb8420970ea20534d2e12c256b2f30b13ad59436fcea99a4b94349a12f5567b4c201e287e5b6584fb67183f75cb267cbd838141fbd5a2ddc
SSDEEP

1536:RwOEzdyuJuFp1Qza+eSAGeyIkbJhBcGpn+iMPK2BkKcl:GOEzwusT1Qz6S0yIA7BNpMPK2BrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2198895fef564a8f7bceee009bbbe7d_JaffaCakes118

Files

a2198895fef564a8f7bceee009bbbe7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\AymenTLILI\source\repos\WindowsFormsApp2\WindowsFormsApp2\obj\Release\ThawraRevo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ