b483c043aac18a3beeb0e48ec3be7ced_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b483c043aac18a3beeb0e48ec3be7ced_JaffaCakes118
Size

333KB
MD5

b483c043aac18a3beeb0e48ec3be7ced
SHA1

3fce987dfb6c19f7c740a78b04047acb4ac17587
SHA256

8b082f5b44b51991912cbdbfec796109e15053a087ae3402489ff08b9cec683e
SHA512

1c5061a640e827e93ab41740fc8d30d0411c25978d495f2bc93169626f1866df5b6f1887bba455264d5276c90b1d1fa40448c0e9423310b1e59dde43e6e3845a
SSDEEP

6144:A6yld/jsuOm1sM6eMlxT6Cto6DppvppovkkkkkkkkGkkkkGnEzHMIy:1EsuOVOMvT6AoippvppMkkkkkkkkGkkU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b483c043aac18a3beeb0e48ec3be7ced_JaffaCakes118

Files

b483c043aac18a3beeb0e48ec3be7ced_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\22Azerty\WindowsFormsApplication1\obj\Release\Samargdin.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ