07d7293877e94e93bed243c6daf5a9fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07d7293877e94e93bed243c6daf5a9fc_JaffaCakes118
Size

223KB
MD5

07d7293877e94e93bed243c6daf5a9fc
SHA1

993b59af00790d9cbda35e78d06d2a27cb4dc28f
SHA256

d1ddb0678481203d5d1d9ffee8f6175a298fccfac6830001ad296b1b02f47fbb
SHA512

7eaf0dba110b5018f28fc5e9bccc548ca5f8297ef7176d97c250062281c91fe25b307eb69cc64bb67af0735cab203bcdf520f152b1c859c05a90c99d9f4cb99e
SSDEEP

6144:q83EdFt1jClUFwcffUVb/G8iR07IZYo5GTyRZ/7fP0Ov826RdabG3:q83EdFt1jClUFwcff8b/G1R07IZYCoO4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d7293877e94e93bed243c6daf5a9fc_JaffaCakes118

Files

07d7293877e94e93bed243c6daf5a9fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\TZIROS_ON_TIME\TZIROS_ON_TIME\obj\Debug\TZIROS_ON_TIME.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ