671cb51aefc15cdf791658c13e785733_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

671cb51aefc15cdf791658c13e785733_JaffaCakes118
Size

582KB
MD5

671cb51aefc15cdf791658c13e785733
SHA1

8928382a3c0314b78c638bab13fc73006faf900f
SHA256

f5afaab668d50161ee946505396a813d8e5e54bcb5e28cc4e6c6e09889da208f
SHA512

e6d4d65936b831daaab58e6d275a870bbc6a896a2c6b0728d6114122671e62e28f8ec719822fc7dd914dd930cc9a06155089d7b7d3f320f1434b35b8183a2c22
SSDEEP

12288:ACDC5CxCyCrCjCnCjCPCDCXCjCbCjCPCDC3CjCPCjCnCjCPCDCXCjCPCjCUZT0:ACDC5CxCyCrCjCnCjCPCDCXCjCbCjCPJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
671cb51aefc15cdf791658c13e785733_JaffaCakes118

Files

671cb51aefc15cdf791658c13e785733_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\fdfafdafafadfadfafdafadfadfadf+++++++\bycaner\bycaner\obj\x86\Debug\bycaner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ