4227b86e636c4b9b678abc00aad6e08c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4227b86e636c4b9b678abc00aad6e08c_JaffaCakes118
Size

284KB
MD5

4227b86e636c4b9b678abc00aad6e08c
SHA1

847bab5b149e391b3b61c4229bfe3ee50ec75e69
SHA256

1efe615908e7315bead0be0a3fb02d74c5b3e453dc044a7a07a16c383f52c0ea
SHA512

9a2059f883594138617ffafe34b42c8439c86e97f0220d3cb11f4d32f351397e72d52e7ee72bef17ffb9cf5beb9523835dbe0d0e444de71940ca8f5705a0239a
SSDEEP

6144:0lStXJ3N6Iu275VrRFUnObZa1SyjMuonw1:0lStXJd6RYCSyjMuo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4227b86e636c4b9b678abc00aad6e08c_JaffaCakes118

Files

4227b86e636c4b9b678abc00aad6e08c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\New folder\New folder (2)\Rapid Screenlogger 2.0 Source\Rapid Screen Logger v 2.0\obj\Debug\CUF Logger v 1.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ