06fc41347348890c999711856806ff42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06fc41347348890c999711856806ff42_JaffaCakes118
Size

241KB
MD5

06fc41347348890c999711856806ff42
SHA1

b5e498fd821eb5c788e86b143a729ce1acbe6ee4
SHA256

0b4765f77b8ec73a799a47f904dd9df3fd6b0982d9f83f007dff013b7893e4ba
SHA512

511d96e1292abdec089d7a747cc0307e61712fbf082a84f922a2ba697574ef59665d5c0b43c4fd77a96754e6007c854d83c579c5b28d0d74a336a3a6cb31c5dc
SSDEEP

3072:m60exPOtOZeVnqFBI6dPAoUtB8DztPbGUeb6W3kA/JRDgqvKv81W25jFHETiitwO:miPpIqFBD4o6eDzxBQj3l/Jp70V0A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06fc41347348890c999711856806ff42_JaffaCakes118

Files

06fc41347348890c999711856806ff42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

D:\Downloads\Compressed\netz-bin-20\netz-bin-20\Explorer.exe.netz\newfile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ