160b28da8a6f17ba57d205b33d5a5158_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

160b28da8a6f17ba57d205b33d5a5158_JaffaCakes118
Size

28KB
MD5

160b28da8a6f17ba57d205b33d5a5158
SHA1

dde13659f875bdf73823dd971985060d043da754
SHA256

43f4648406b53a6d2d03ab5d6266ca53c5bf9f2a1eafe3c3d17bbf2ff1932874
SHA512

8912fa57db4ca3d9600860dfa7a5674bc30e619848c7208e3854b0de3e9780a4e523046f591acca846f2cc710932ae95df67e8430b6d7f1a86f046ac093639c1
SSDEEP

192:ZHgt1eaCVZwbIL5RBkI1Ur5gN9AZUHQAQZ6Ig0dn6OzggDNWtFHxYWCZVB1IN:ZzpNS2HQAdPQn6YWrHfY1IN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160b28da8a6f17ba57d205b33d5a5158_JaffaCakes118

Files

160b28da8a6f17ba57d205b33d5a5158_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Personales\Project\SkyNetFileRecovery\SkyNetFileRecovery\obj\Release\SkyNetFileRecovery.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ