34bef98ae7ec3d3dbe34431f48ee7f92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34bef98ae7ec3d3dbe34431f48ee7f92_JaffaCakes118
Size

105KB
MD5

34bef98ae7ec3d3dbe34431f48ee7f92
SHA1

85a0d86a94bc71462136d1f12c7926398d29f900
SHA256

8b599d6523fdc07df14a8263b37b3babf050c2ee7b9215c535baea22d59d73bb
SHA512

503f751dca034389d6d9cd329aa9476f781c8731dfa4905cd54d0f258ce0be391e4ec71a2e718517614563b00e3e130df841f08d06bdd16e974752bb66b91a1e
SSDEEP

1536:ciVh236s1gtvtSs14bcFBbnmtUCRSQzEJoodCyY56iVh23:c3nW4bc7mtfzao23Y563

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34bef98ae7ec3d3dbe34431f48ee7f92_JaffaCakes118

Files

34bef98ae7ec3d3dbe34431f48ee7f92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\caner\Desktop\Resim Yöneticisi\obj\Debug\Resim Yöneticisi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ