5f95b47d6b9e99f12b7985e47366c6f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f95b47d6b9e99f12b7985e47366c6f0_JaffaCakes118
Size

97KB
MD5

5f95b47d6b9e99f12b7985e47366c6f0
SHA1

c13707d836a68e22115b9e9796425c299d3869eb
SHA256

29d054fa78cee994bacc4952d416cb6dab3420a6200495afbe44de057f939db5
SHA512

26ab98ce9f7047085039aecabbf84d60ec80b3fa1a695f08da4f009c22397654a697a9ecb8f61e6ca5e60c688b36ac12e80e618b26e50a66ffb2f8686a6196b3
SSDEEP

1536:5zCo1Tu02uvZkLYAxP13i2RbL0zfivdDoSyok0:RCo1C+iLYAX3i2RbLwfiKSyok0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f95b47d6b9e99f12b7985e47366c6f0_JaffaCakes118

Files

5f95b47d6b9e99f12b7985e47366c6f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\wosc\Desktop\dfsfsdfsfsdfd\Keylog\P1\obj\x86\Debug\winConfig.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ