36b07d7e9dceb26a23978dc9fdd0c246_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b07d7e9dceb26a23978dc9fdd0c246_JaffaCakes118
Size

606KB
MD5

36b07d7e9dceb26a23978dc9fdd0c246
SHA1

27c40ce61813c38af8dcc4f19784bfa0dbccfe44
SHA256

915bd60546968848cd02f387b003f4a1582e36558673519b4669a1df60ca2ea9
SHA512

3bf76123a73897b7b44de3f219b7595898f39b03b38cfb5c70129ffce3d1f02814ad2a831deba11e354a95ba683f147282a9d4528e054a17cd9ea3895e164251
SSDEEP

12288:FmEstdSYjOIXp+T918aMd1us8iEw5xkg283ZANGGMSiTUOkq:a5OI5sMd1Fyg2gANcb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b07d7e9dceb26a23978dc9fdd0c246_JaffaCakes118

Files

36b07d7e9dceb26a23978dc9fdd0c246_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Desktop\Osmanlı Stub\Osmanlı Stub\obj\Release\Osmanlı Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ