2d62c8cef96b05094f3a54ee3916dbaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d62c8cef96b05094f3a54ee3916dbaa_JaffaCakes118
Size

633KB
MD5

2d62c8cef96b05094f3a54ee3916dbaa
SHA1

af05ee4bf87c3dc0a14725cc22c55cc8e3e5088a
SHA256

1bd8b8219031e521cbfb998a55a981c00987dff8fc5752416a178b4ac85aba24
SHA512

48d1d7e4e4a871ea7ebaf6cab31e448c1979db2ed67de9c7ad74946926e8c4d1d16f8964c8d1a6273fc2579a1b88aacfb0fbdbcbed776c672372d774b8be014b
SSDEEP

6144:LTSeRSX0W9Q7JHsRam/Aw8uoxKfLkynIgK54IQzeeeL4/Qj:tad67JMRam/Aw8ubgyIgKKM4Yj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d62c8cef96b05094f3a54ee3916dbaa_JaffaCakes118

Files

2d62c8cef96b05094f3a54ee3916dbaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dr.NasHmE\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ