07e9475b6828dc41277768f672a8be07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07e9475b6828dc41277768f672a8be07_JaffaCakes118
Size

686KB
MD5

07e9475b6828dc41277768f672a8be07
SHA1

0c808b145dc7e9e4c2336bd9e1f7012b6d497e82
SHA256

ab7fa667c48f832ec2aa5d555c102f354ee4ae7ca2b01eb18442e58d2d47bde2
SHA512

c4a1439072db8da6e543dd8e4d0c7411c29ffe665938cb874a34d7b08e8b4d55b48706c8e4c695ab12fc2504581abf91b07d28cb5e7a252290d7bad9bde7d209
SSDEEP

12288:B5YXCvSmieMvl8lJBkdQ/dOrTA2bwEII:QyvSQul8lJDdOrIEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e9475b6828dc41277768f672a8be07_JaffaCakes118

Files

07e9475b6828dc41277768f672a8be07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\wosc\Desktop\testing\dfsfsdfsfsdfd\INSTALADOR\INSTALADOR\obj\x86\Debug\Activador.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ