2bb764ac297869a2ae80baaf5e08de22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bb764ac297869a2ae80baaf5e08de22_JaffaCakes118
Size

40KB
MD5

2bb764ac297869a2ae80baaf5e08de22
SHA1

35e9653f298d11fae9494011c2ab242d6b7ca185
SHA256

c925086d9ef79700328ad668103649499623c04fef19aeba82a075e1f16335e2
SHA512

4fa3589f6376b9dbcfdfd1c24e423f36be0d6aa0ec1bbdff1a2d056ef4d89dbb3a0c042586f00d40b4e7f4bd19b273a642b8efd2183bb8f529ac895f5dd93c1d
SSDEEP

384:iBH9QPE1+1stH4wvuk4M+ZwzNeqi3DOLSiCS2Llxs0NaHpiHJzDr/JHAf:iJ9GZkeh3DOHCSkNgYJzDr/Jgf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bb764ac297869a2ae80baaf5e08de22_JaffaCakes118

Files

2bb764ac297869a2ae80baaf5e08de22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\DATAKODNETPLUS\OZEL_PROJELER\INKATRZ\INKATRZ\obj\Release\INKATRZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ