37aca25fc265df70465b2436e8176728_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37aca25fc265df70465b2436e8176728_JaffaCakes118
Size

382KB
MD5

37aca25fc265df70465b2436e8176728
SHA1

665c41e8e21e3e31e5a635edaa5626fe66fd2a00
SHA256

cf758f765df1d7d0d59286c5a2085376dddd70a823daa874fcd73247e725901c
SHA512

18d9c58427056670b9f566e3c6227a9cfc66cbdcef8d5ae22de4c800e7d456af7a35fda5612e6e8fac25f6ab46f9b0ce9682b8f16d591eb3939ef37b37bb805d
SSDEEP

3072:QFtXt5jj5N413VuFP4deQ9Ph19wYSr2quWbsVuA80596XBtr/AI2zkAG/z:QrUVVYQs41x224LA8jrrxrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37aca25fc265df70465b2436e8176728_JaffaCakes118

Files

37aca25fc265df70465b2436e8176728_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\My Files\My Work\My Project\ShowMyHiddenFolders\ShowMyHiddenFolders\ShowMyHiddenFolders\obj\Debug\Show.My.Hidden.Folders.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ