29e8146b7c668db504b4bb29aa51ee24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29e8146b7c668db504b4bb29aa51ee24_JaffaCakes118
Size

151KB
MD5

29e8146b7c668db504b4bb29aa51ee24
SHA1

09b469e61620eb3da696055868621383718a5815
SHA256

d68b6cc3f5e4f63e71fc04a71cca8e608625dc98e72efb7a41e4f2934815ac6d
SHA512

c4788545c35cf3c39647bb4c7739ef69d6d58c4636dd9fcd050bc34a1566c7378de2eec07b5ce61fc04a44e2a65cd4a4bf89f92b42202176f3e297fa1aa15c49
SSDEEP

3072:59nP1pfzJ2MN5Fwj3r3swL44A+9ASaur96gP/jH0hT4kRMO1mSwo/RsyAD1fe:jrN2Owbgab/9x/jHDOI3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e8146b7c668db504b4bb29aa51ee24_JaffaCakes118

Files

29e8146b7c668db504b4bb29aa51ee24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dezired\Downloads\dependency\obj\Debug\Cursor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ