17f472abb61f140e81751d4a3c0968e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f472abb61f140e81751d4a3c0968e7_JaffaCakes118
Size

91KB
MD5

17f472abb61f140e81751d4a3c0968e7
SHA1

df04655e73ba2c9ffd1a0adc5c5c8de69f4517f3
SHA256

06769036be11dd23440f9fe2e2f6f98fd16375bbfafc79abc740db3a4350ab34
SHA512

bf04b1220de7fde11d78ba5faf5acfd11619329bb71f1634d6a245f2aa17f3bc2f07fbe631622506ae0ed4c2ab3164cb2a74f962e1a3c2a406cbbc3b4b3888bb
SSDEEP

1536:UyHqTJtJFLacMXvCMBR2M7RcZVqFX5HiRJqKluHzfKM6UeU2clRGEvnMPbuwV2yI:Uy4ucMXvCMv2M7RcZV3RJ01yIRxvnMTs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f472abb61f140e81751d4a3c0968e7_JaffaCakes118

Files

17f472abb61f140e81751d4a3c0968e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\IvanErshov\source\repos\heltyMalware\heltyMalware\obj\Debug\heltyMalware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ