2e81198e65f73152e42f91ce5313d179_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e81198e65f73152e42f91ce5313d179_JaffaCakes118
Size

19KB
MD5

2e81198e65f73152e42f91ce5313d179
SHA1

32b16beeb98d836b3212656d90fcde0092f28962
SHA256

59b0bdefd725ae9bbbfc8adeff45929f4f64acf00d15334d94b741b2620e22ec
SHA512

a8178af9e9c58e12a24d4936561cd467c2272d470b530276295d0e1a284c5c24f2a6e34e44728a44baae0dae22c002702a533220d8cec7e321ec916dbe188e39
SSDEEP

384:2rRlFZQqzICFTkzc1Lk245Ja3X3X659GHb:2rzFKqcq4oJA9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e81198e65f73152e42f91ce5313d179_JaffaCakes118

Files

2e81198e65f73152e42f91ce5313d179_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\xxxxx\Desktop\Programlar\explorer\explorer\obj\x86\Debug\explorer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ