5cd83c911c4bda0074f49e0e76af8c8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cd83c911c4bda0074f49e0e76af8c8f_JaffaCakes118
Size

257KB
MD5

5cd83c911c4bda0074f49e0e76af8c8f
SHA1

71f42d7f8bc597ecdbee58859d59ad37dbe09b5a
SHA256

3e09aeba00d4f102fdce70d8b8dd9f9964e26c7197de5d1469051e47371c0c8a
SHA512

f2e1abbe36417a44d1422990b509f9a8a2b2f2556226839dd5d91c6881127a16b12659795160599f65ecde16e874db35cedf88eb53c59d166fef7da78c3e2265
SSDEEP

6144:zSFkaXOKY99H8ilq2yU5AtoB6XHUW55Y67qp1:zSFkOOKYf8iWIv2HfbTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cd83c911c4bda0074f49e0e76af8c8f_JaffaCakes118

Files

5cd83c911c4bda0074f49e0e76af8c8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Surse\Crypterul Meu\Resource\Resource\obj\Release\Resource.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ