6488af52ec688d9c1003864284efc4e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6488af52ec688d9c1003864284efc4e5_JaffaCakes118
Size

237KB
MD5

6488af52ec688d9c1003864284efc4e5
SHA1

395af20083b0e57c82571bfd60a32bab73f9ede8
SHA256

c4fb96db2e83e62c494159424a593bd0ae56b9407aadb21ce6c76dbe4c92519a
SHA512

5022d1b1aa71f2691ffa71ba0a1b7aacec1b8c5bced4907055942dcd14646c591ceea0506ea96c5f8a7329426f35a6f0f1117e13790f21cb8e63102373acbea3
SSDEEP

3072:+GRGu7QsbCaqq3QncKhhfQrkW+OLIPFUf8kkQ/K+A/iwhjAwNLN0aHux+Mxd4DE:9ss+Irm3A8iwh8yvHGWDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6488af52ec688d9c1003864284efc4e5_JaffaCakes118

Files

6488af52ec688d9c1003864284efc4e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Programmierung\.NET C#\Projects\Girl Watcher 4 (Root)\Hauptdienst\obj\Debug\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ