aa7f54e9fc7dd68d9b2b332a81d7bbae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa7f54e9fc7dd68d9b2b332a81d7bbae_JaffaCakes118
Size

442KB
MD5

aa7f54e9fc7dd68d9b2b332a81d7bbae
SHA1

5a0453536c4ce473d0ae5381abae975a59a96b10
SHA256

204819e5a3fe250b1230809a885ac6767fa1c5b37e235a265c4518893fd552cb
SHA512

c80b357094af423b7417b6d553e27f22e5655fdfd4546aa8a6d113fdbb5f87ccdc0d38f4e1ddf253d2b9a715de16af6a5e8f95b7a96c1d67cb163c1dd8f96f1f
SSDEEP

3072:89MXgyXKKM5yHgINiisRAnrLYo8DDpnfpm0IyDLt8Ot:89M8+rYo8DVfpm0IyDLt8O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa7f54e9fc7dd68d9b2b332a81d7bbae_JaffaCakes118

Files

aa7f54e9fc7dd68d9b2b332a81d7bbae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Sina\Desktop\My_Anti_Ransomware\Anti_Ransomware\Anti_Ransomware\src\FlatUI.Examples\obj\Debug\Anti Ransomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ