1c75eb5c98d3537d5efbdcce3c0a0cab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c75eb5c98d3537d5efbdcce3c0a0cab_JaffaCakes118
Size

224KB
MD5

1c75eb5c98d3537d5efbdcce3c0a0cab
SHA1

b889136f593ba1398cef3773e7e3fc1a5cfcd8c8
SHA256

b83db757befce42d8801ee69e8eec51621954c5cbea5f4d6279c859c2b95e251
SHA512

698f257d5db9efa92d99670b21c15f372a4d74c57c16243d9413c3fa705a46c0be849cdedaa323781b20a94d9cad9484b9ec836b7bb7ac121f7c4a0eede2b1f5
SSDEEP

6144:z0iCRMHmTriYp/x73bXTjTvxGz6bnIKoL:bCRMHmT//+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c75eb5c98d3537d5efbdcce3c0a0cab_JaffaCakes118

Files

1c75eb5c98d3537d5efbdcce3c0a0cab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\user\Desktop\Programming And More\Lonely Logger Fully Undetectable Public Version 1.0\stub\obj\Release\Publicloggerversionztub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ