250cc56378162dc14a5a5488e37609dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

250cc56378162dc14a5a5488e37609dc_JaffaCakes118
Size

6KB
MD5

250cc56378162dc14a5a5488e37609dc
SHA1

0f6e35fe5b20ca1768a08190bfeb7a7039664c0e
SHA256

984f893fcd2bcd9f3433f73de493399e058eb6e72c7a6272ed42b8607043e23b
SHA512

2cd1f74b23701ea87d38134b922c8b9886cdb094121ab62a6b3216b7477dcdb46c369cfcdc29626cfa4ae823e37e5d887a27df33e68e96f365412896ffb15e39
SSDEEP

96:biStK9OSCfq/sqDLXBEAg8c2SBWFVHlSASzNt:biStFeBEAgL2SIFVH/U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
250cc56378162dc14a5a5488e37609dc_JaffaCakes118

Files

250cc56378162dc14a5a5488e37609dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\Desktop\Software Bootcamp\Artifacts\dotNet Stream\Csharp\Properties\Properties\obj\x86\Debug\Properties.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ