b33d988073c4f829a18cdf2294a93f9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b33d988073c4f829a18cdf2294a93f9c_JaffaCakes118
Size

12KB
MD5

b33d988073c4f829a18cdf2294a93f9c
SHA1

579c33715fc0cfc4a9175330c258dc573efc1a15
SHA256

4dd5cac2602ab7a1c949564b2a9dd54c3da7a27694ebddebb310ba0e51d6da0e
SHA512

75b399ab320c2da01d4867da67f37f0e1eacbe24b5729ba85e078abaf47ac3e1ceba7171e6f371def87380092d657f18d050d99baec3a34df268fddcefb3b98a
SSDEEP

192:weZBwzYwaI9yT3IMcM5nu2IW1YPZ/h+XB/2kBntbf5OWvV:dZaYw/9yjH5nuPZ/hI2EfgWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b33d988073c4f829a18cdf2294a93f9c_JaffaCakes118

Files

b33d988073c4f829a18cdf2294a93f9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\caio\source\repos\TextME\obj\Debug\TextME.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ