5ad9fbaa70565fe26683b2ad738ef340_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ad9fbaa70565fe26683b2ad738ef340_JaffaCakes118
Size

103KB
MD5

5ad9fbaa70565fe26683b2ad738ef340
SHA1

23874586328afdc9f5b5924b51320b3eca9b48f5
SHA256

9fc428f1306ec598bb9a4c0bd3ce1d32d58635f7c526d44f9a6d4980f2608abf
SHA512

79465ae9c3e0c0030273e12ef48264b635c102061405de2274afa945f7a47bfa9c8a9800c9c70404a075e779a119a271e9506151d95cdb5e1e74bcc26b29f6b9
SSDEEP

1536:HLfiXdqdlh/c9mHmT9+0ux+OScVeuMD/:HDiXdqdz+mHm5m3VeuMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ad9fbaa70565fe26683b2ad738ef340_JaffaCakes118

Files

5ad9fbaa70565fe26683b2ad738ef340_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\etc\der-net\vsnet2008\ortak\DYardimLib\DYardimEditor\obj\Debug\DYardimEditor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ