377091afe426b7322d2b39e8ef5f906a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

377091afe426b7322d2b39e8ef5f906a_JaffaCakes118
Size

308KB
MD5

377091afe426b7322d2b39e8ef5f906a
SHA1

03ab1e65f0ab19acdc5db5b33412d3cbb082448c
SHA256

71246673d6c3719cf8c07645d8eb1bfbd7deeaa3c24ec928f5d6d0d913779657
SHA512

2b0974b279e12b896219e478a1e273ddbe82c46370c3a35d6f3b04d0165d3d4511f64f533c4e23a0517206138c3a0c2b7dabba30244ba2bd2533a1e13087ac0c
SSDEEP

6144:KERBZdNcSti61Jez9OvbH9IRDI9B4fCZS1yF0L/aIS3mP3B1:TDJSyFES3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
377091afe426b7322d2b39e8ef5f906a_JaffaCakes118

Files

377091afe426b7322d2b39e8ef5f906a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\noUser\Documents\LogsHelper\LogsHelper\obj\Debug\LogsHelper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ