0a1ab685b5707d9efa524675f39517ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1ab685b5707d9efa524675f39517ec_JaffaCakes118
Size

420KB
MD5

0a1ab685b5707d9efa524675f39517ec
SHA1

1180150698ae88c56e4e4ca12da9789d9dd659ea
SHA256

68c8d011317e51c5e6389fac54c0b785e5c74a01633f85e631c8bdc746f2c95e
SHA512

9183ea7316c7c40dd5f34079768f37cfaf5539668318be02faee050aae228bf1ece159a7f00ed9fd5a3fe638f658952bc09ef411374debae9982b02ab2695406
SSDEEP

3072:dBDu2MtZuGjIA6zKYfPrGxJjHQVE0YRzTP+csJI0vNbtFoYGD0fw75BEY02IIK0K:dBDueA6zKuPrQJj5uoL73G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1ab685b5707d9efa524675f39517ec_JaffaCakes118

Files

0a1ab685b5707d9efa524675f39517ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ASUS\Desktop\Invisible Logger v2.0 BETA Private\SOURCE files\ILStub2\ILStub2\obj\x86\Debug\ILStub2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ