3e8ade57709c933e978472e3ff272088_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e8ade57709c933e978472e3ff272088_JaffaCakes118
Size

83KB
MD5

3e8ade57709c933e978472e3ff272088
SHA1

c9c81011ffb3c3eb4a36dca7a87600fbee592759
SHA256

6bfa4a238f0928dfcca813ca5225845a5f44998d5d143543cc18969f7583070c
SHA512

edff17e7fceeb3dc48680397198b14fe8a5fdd6366a33521a219029c0c9d61dd80f02a05b5b1b1d9ba8706a3345d6688cf841f1700894b23eb82b51a60c4746a
SSDEEP

1536:mc31kLFVh+Y49jIPAaOipQJL7WPGsDACGXqvXYNo9Hh8chh9Q:mc312FCZ9jwpxtDAD6XYNo9uce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e8ade57709c933e978472e3ff272088_JaffaCakes118

Files

3e8ade57709c933e978472e3ff272088_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Joe\Desktop\Albertino RAT\Albertino RAT\ARC\obj\Release\system64.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ