445d760ed903f69af5169100bc87b2bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

445d760ed903f69af5169100bc87b2bd_JaffaCakes118
Size

62KB
MD5

445d760ed903f69af5169100bc87b2bd
SHA1

19442ebf8c9a1b4bd74d7f9ffd5f45c8c3d6e4d8
SHA256

f9dad131cb9c8acf2595d0e29968015541839b963474d652688b9c8d430f5dfd
SHA512

191e8239dd55cf4deabb7864a14cb5335b428580446c45b72a642de4dce4fc34efcf012cc18800b569bc187f175b5e6e0fbf43031405a66bf617c46806889b2f
SSDEEP

1536:75gWZikEU/Nrku5aum556F1G2gfR2oukI:7ZZ/NrkWaufdgMoukI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
445d760ed903f69af5169100bc87b2bd_JaffaCakes118

Files

445d760ed903f69af5169100bc87b2bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

I:\hacking + programmation\BlackICE\Source\Black ICE\Black ICE\obj\x86\Debug\YamaFreeze.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ