414ecc6771641db55a90ea4e5d0533e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

414ecc6771641db55a90ea4e5d0533e5_JaffaCakes118
Size

579KB
MD5

414ecc6771641db55a90ea4e5d0533e5
SHA1

42b31243d851f7d0c2af98e8091fd8565a2bfbbe
SHA256

73675104a76c4ea1625366c9c77d19bde2245e5e6862e0d1625e6b06d25086f9
SHA512

08f3311e295e8cf91c69b76f49c880e4609be9d5e49af1e09d734b886d02d039bc8f7f8faf4eeb151fdceba52976e84f37f0ab93f6fa5a55dc5f63e302f8b317
SSDEEP

6144:1zKedQBRZFeE7BUBBb9lgtF3FzKedQBRZFeE7BUBBb9l:1uedsZwa3FuedsZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
414ecc6771641db55a90ea4e5d0533e5_JaffaCakes118

Files

414ecc6771641db55a90ea4e5d0533e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Utilisateur\Hack facebook\Hack facebook\obj\Release\Hack facebook.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ