4786cc353b2f7fd1721c9e87af3ae6bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4786cc353b2f7fd1721c9e87af3ae6bd_JaffaCakes118
Size

423KB
MD5

4786cc353b2f7fd1721c9e87af3ae6bd
SHA1

5dc5dc8bce0e55953f966592da32076c3e18838d
SHA256

5b419f4669395c00a3fdea4e595f3fa9f73d3c8da3620862996fb94da4d2379f
SHA512

9d4ed45bd26b1733a61c8878e44c7956c74248bd5f3a6f994a121674bc54fc6729601fc9ab4cc0b1911f69b2aabe49b68045aa8e1029d26f85ec9010b737b227
SSDEEP

3072:UbPO9TqbDRCd/vMXudxtNCghwk3qS/lUqo69UE75e9TqbDRCd/vMXudxtNCghwkU:GPOsDRFuJ1wk3d9HQsDRFuJ1wk3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4786cc353b2f7fd1721c9e87af3ae6bd_JaffaCakes118

Files

4786cc353b2f7fd1721c9e87af3ae6bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\i64\box\Software\Prablinha\BN_Revolution\obj\Release\Prablinha.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ