045776fa97a6dbb761bd63c670783bcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

045776fa97a6dbb761bd63c670783bcb_JaffaCakes118
Size

24KB
MD5

045776fa97a6dbb761bd63c670783bcb
SHA1

38b1ac3d5a1af0f7b735fbb3cd21091d21290167
SHA256

ce64427da4a5fa6a2fefbc77266b29459836be85f40fbc190ce907e78cda869c
SHA512

5d26f09eb2fa1a406e0233c5337d7d59fb5f229e49252dcf66243de906a133f9621371987732feb65a502fbe3cbf243b3914ce52be5a49d6329c767bb257c68a
SSDEEP

384:VUtHDIXBXzTVMNMIUm4cKS2Kv4dFG4+W/+jWurE07aM4asaMIyxh9bHPWOy6nlzV:mSXRcKSp46VW/7s7aM3/WC6lzmBDm5GI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
045776fa97a6dbb761bd63c670783bcb_JaffaCakes118

Files

045776fa97a6dbb761bd63c670783bcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Seguridad\FileXtreme\MALWARES\Inofensivo V1.1\ArmadaPeruana\obj\x86\Debug\Claro.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ