05983be0819c6238df19591b5b75ca07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05983be0819c6238df19591b5b75ca07_JaffaCakes118
Size

87KB
MD5

05983be0819c6238df19591b5b75ca07
SHA1

3a6eb32b863771fa2355332e2af1afd1a467bd9b
SHA256

d47bc548669b94c1baad3cd516e0acf82f24ffe99df39d5a81aa7a6f5e2787f7
SHA512

f692c94271edbac416d2243457f066281562f8f8433382401638c21bee659d8dfceea03bcf124fe305f39a24a337a82e265530b86f59e4ab9bc6bcefd5b129ec
SSDEEP

1536:zzUZflq0VUJOhmmneAWcwf9rifqMu6tRfMu9cXy1JJpRn6UIIpb8jGNVR:zz2fTOXu2f9rifqMu6tRfMu9cXy1Jh6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05983be0819c6238df19591b5b75ca07_JaffaCakes118

Files

05983be0819c6238df19591b5b75ca07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Lexos_Emp\Lexos_Tec\Projetos\Lexstore2012_OldVersions\Lexstore3021\Lexstore_3021\Lex_Inventario\Lex_Inventario\obj\x86\Debug\Lex_Inventario.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ